General Topics

Traffic Logs - Resolve Hostname - Micrsoft Public IPs

Dear Commuity,

I am very new to Palo Alto Firewalls. I saw, that you can check the "Resolve hostname" checkbox when viewing Traffic Logs. Sadly a lot of IPs are not being resolved. I examed a few random samples and notices, the IPs mostly belong to Mi

FQDN TTL shorter than refresh time

I have a problem with some sites that uses DNS round robin as loadballancer.

As an examble:

vs-ssh.visualstudio.com

This has the TTL set to 300 sec, the PA's FQDN refresh is default 30 min.

So the firewall won't cache all IP's used in the round robin, b

Dynamic NAT IP & PORT with STUN

Hello,

Is anyone already configured it ?

We want to use STUN but the NAT seems to be a problem.

David,

BGP flapping every 15seconds.

Upgraded VM-ESX firewall from 8.0.12 to 8.1.4 and seeing bgp flapping to all the 3 peers.

Its happening every 15sec. Checked timer match.

Active/Standby network design and usage as network gateway?

I have some questions on the Active/Standby deployment model.  Right now I'm on A/A which requires all network config between the two units to be different since they're both active at the same time.  From looking at the documentation, it looks like

Minemeld Miner Integration with 3rd Party Threat Intelligence using API

Hi Minemeld Community,

I am working on creating a custom Prototype to integrate with 3rd threat intelligence Cloud solution using API integration. 

Do we have a generic API custom prototype to use it? and how can i do about it?

Thanks

Darren Ko

Understanding Panorama & Firewall Configurations

Our Panorama server has 3 firewalls connected to it, all 3 are the same model.  All 3 firewalls are linked to there own seperate template, template stack & device group.  Each template, template stack & device group is linked to only one firewall.  N

Exporting full applipedia list

I was wondering if there was some way to export the full applipedia list to include the standard ports and implicit use/depends on applications also. Or if this information is somewhere else that is easier to pull from than selecting on each individu