How can I modify the Security Policy default columns and order for all users, not just my view?
Hello, I've bought a refurbished PA-500 for my lab.Is it possible to get current PAN-OS images for this device? Regards,Martin
On our "SKYPE" rule I have removed web-browsing, this causes dependancy warnings on commit. I read this "solution" https://live.paloaltonetworks.com/t5/Management-Articles/Application-Dependency-Warnings-with-Allowed-Enabler-Application/ta-p/55142 But not sure if it's correct or makes the rule insecure? Rob
Can you add a user group under the user tab in a security policy
I think I've asked this but can't find the thread. What is the recommended way to get some kind of "Top Domains Visited" report?Everything seems to default to rdns of the endpoint which is not much use sadly with cloud/online content providers i.e. your users visit Amazon/BBC but the resolved destination is node-17-cluster-5.eu.akamai.com and s...
HI All expert my panorama M100 having an issue with disk space 95% in used need to clean up. I tried to delete all the core file and all the software and patching download but the Alarm still remain. Tried to monitor few days but it's still there....and keeping increase. Is that anthing i could to for clean up the disk space?
Hi, I was wondering if we would have the option to anonymize our monitoring reports.with anonymizing reports I especially mean by graying out the username or change it by ip address in automated / schedulded report Thank you in advance
Hi I gave a rule that allows snmp-trap messages to my SNMPD server. for some reason PA complains that SNMP-TRAP needs SNMP-BASE. Now if I add in SNMP-BASE this is going to open up port 161 where as trap uses 162. So why do i need SNMP-BASE
Hello All If same user information is coming from AD and from other source like Cisco ISE syslog messages then which one takes preference in firewall?Also who can I verify that both sources are sending user/ip mapping? As I always see source AD using command 'show user ip-user-mapping'
I am currently testing Multifactor Authentication using a Radius Server.1. I have a test group of users who have been configured on my Radius Server2. The MFA Radius server is alway reachable via ping/icmp at all times3. MFA via the Radius Server works as normal for a time period ranging from 24-72 hours (i.e users log in using Global Protect Cl...
Good day to everyone!I have such a case: I have to find out which users send email to ecober.com.I have researched, but couldn't find any useful information.Which filters should I use in monitor tab?Thanks in advance!
Trying to use a Security policy with type intrazone and action is Deny (any application & service).Target is to block all communication within the same zone (subnet). Such as ping, file share (smb), ftp, etc.The layer3 interface and the computers were connected to a unmanaged switch. But the outcome is only the gateway (layer3 interface) can...
Hi, I have some problems with log forwarding from firewall to Panorama because it is consuming a lot of bandwidth. I have configured the firewall to buffer the logs before foward them to Panorama. I would like to know the following:* When log forwarding initiates from firewall to Panorama (50% or 90% of buffered size for example)?* How I control...
I've deployed QoS on a PA-3050 and currently have 2 profiles that I'm specifically rate limiting at different bandwidths (class5 and class6). I've looked through all of the reports as well as App Scope but can't find anything that shows me bandwidth usage by QoS profile. Essentially the customer is looking to have a line graph that shows bandwid...
Hello all, I am having a bit of an issue with getting captive portal to work the way I need it to. I have it setup and my Macbook was able to redirect to the correct page, I was able to successfully login, and then browse the web without issues. The problem I am having is after the timeout value I have set is over (5 minutes for testing), I can ...
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
