General Topics

Understanding Panorama & Firewall Configurations

Our Panorama server has 3 firewalls connected to it, all 3 are the same model.  All 3 firewalls are linked to there own seperate template, template stack & device group.  Each template, template stack & device group is linked to only one firewall.  N

Exporting full applipedia list

I was wondering if there was some way to export the full applipedia list to include the standard ports and implicit use/depends on applications also. Or if this information is somewhere else that is easier to pull from than selecting on each individu

Disabling NetBIOS with DHCP Option 43

All,

I am in the process of migrating DHCP services from a Cisco IOS-XE switch to Palo Alto 220 firewalls.  DHCP is working flawlessly however I am curious about the implementation of Option 43 for disabling NetBIOS. 

In the Cisco world it is implemen

Cant' access after apply Password Profiles in Panorama

after we applied password profiles the users can't access to panorama, cause they didn't change the password in the time that we define, is any solution to roll back this change or trying to access?

Thanks in advance

Passing Cisco heartbeat traffic through the passive device's data plane

In a HA configuration is it correct to assume that the dataplane won't pass traffic?  Network has a need to pass a heartbeat of sorts through the passive firewall for network path health.  Is it still possible to pass this traffic through ingress/egr

Threat in "ZIP", how do you determine what request it was in??

I keep getting a specific threat logged for a "dll" which I suspect may be in a ZIP that has been inspected.

I can't seem to find any information on what ZIP it was in so I can corrolate the event with our web filtering system.

The threat log does no

Captive Portal Auth Successful Page

Hi

I have a captive portal login page. After the users authenticate, how to display a customized "Login Successful" page ?

BR,

RJ

User-ID Statistics

We have a cenario where the Firewall control the Internet access from users in the local network and we control these access with URL profiles and security policies.
We identify the user session with USER-ID Agent installed on Windows AD Servers.
I'd l

Setting "log at session start" on multiple rules

I found a KB but it's from 2016 and is no longer applicable. 

I want to enable 'log at session start' on thousands of existing Security Pre-Rules across several Device Groups. I remember a multi-edit function but something's changed and I can't figur