General Topics

DMZ network redesign

Hi all, I'm hoping someone can help me avoid a huge overhaul and outage window of our DMZ network...

Our DMZ gateway is currently a Palo interface with GlobalProtect enabled on it. Servers on the DMZ are at a remote site connected via a Layer 2 spann

Problems with certain sites

Hello

there are some problems with particular web sites.For example live.paloaltonetworks.com ru.wikipedia.com

Problem with File blocking

Hi all

i need to prevent all downloads on a network using Palo alto without affecting browsing

i created a file blocking profile , denied all extentions in the download direction and applied it in a policy

but iam still able to download many  exe and j

PBF and cisco vpn client

Hi everyone

i have two ISPsinterfaces connected to my palo alto

i need to make a pbf  forcisco vpn client app traffic to cross through the second isp

in the pbf section in policies , i set the application to cisco vpn and ipsec-udb and IKE  and set t

Minemeld: Custom IP list, miner etc for EDL.

I apologize if this has been answered in previous posts, I've tried searching and it seems that I'm getting bit and pieces but not the whole picture.  

How would I go about creating my own list of IPs and then customizing Minemeld to mine \ gather

Understanding Panorama Log Ingenstion & Sizing

I am new to PA & I'm trying to understand the necessity of log collection to a Panorama VM.  My company is about to deploy PA-3220's in HA pairs in several data centers.  We have a single Panorama VM getting deployed for 6 firewalls (3 HA clusters). 

QOS for multiple user addresses

Hi

i need to create a qos policy to limit downloads and uploads of user addresses objects created on palo alto device

i know that i will ceate a qos profile for down and up  , choose a class , priority and type guaranteed and max BW

then create a qos

block geo location IP version 6

Is palo Alto supporting  Geo location blocking for IP version 6? 

Panorama PAN-OS 8.0.8 and always highlighted (Green) Commit button

I have recently upgraded Panorama from 7.1.x to 8.0.8. Although there are no changes and all firewalls are "in sync" for the configuration, the Panorama "Commit" button is Green/Highlighted. Is there anyone using Panorama with 8.0.x and seeing the sa

Palo Alto firewall generates SSL version / cipher suites errors

Hi, i have a very strange issue. I have a webserver protected by a palo alto NGFW, if i disable inbound ssl inspection policies everything works fine and i can access the server as intended. 

However when i enable the inbound ssl inspection policy, w