General Topics

Filter rules with no log forwarding profile configured

Anybody knows a trick how to filter for rules with no log forwarding profile configured?

(log-setting eq 'Profile-Name') => all rules with Profile-Name

!(log-setting eq 'Profile-Name') => does not work, shows all rules

(log-setting neq 'Profile-Name')

App-ID Dependencies and Security Rule Order

Which one of the following is the correct way to configure app-id and security rules? (Bonus points for why.)

Enable MS Teams through minemeld

Hi,

When trying to use Minemeld to enable access to Office365 MS Teams brakes. This is because url api.teams.skype.com is not in the url list minemeld pulls. Instelad this url is being categorized as 'internet-communications-and-telephony' by panos

Dynamic List for URL Filtering

Hello,

We would like to use the Dynamic list for URL filtering function but we want to pick up the list from an internal web server, the link below says the path with follow the service route for palo udpates but this for us will be out to internet,

Playtime

I know that I am not the only one who faces trying to track and minimize the amount of playing on the internet during regular work hours. Is there anyway to track and prove that a user is playing on the internet when they should be working using the

VPN users

Hello,

Is it possible to restrict access to servers for a VPN user? (allow one or two servers access in the local network)

ACC Report mismatch some during time

Hi all, I found the issue about ACC report mismatch some during the time 

Symptom: I try to compare between during time  last 24 hour and last  7 days is found mismatch which lasts 24 hours have traffic more than  18 G but last 7 days have traffic 50

Set up of Firewall and VRRP on routers

Hi People,

I have a network situation wherein I have to configure VRRP in internet facing routers. 

What changes do I need to make on firewalls ? How would I configure this design ? Do i need switch on between firewall and routers or can i direct setu

Userid-agent Showing machine name (not domain name)

Hi,

This morning our UserId agent started to showing machine name instead of domain users. So the rules with source any group wasnt working.

Here we can see how a user is showed, but suddelnly is showed machine name, and then user.domain.

Why agen

MDM per-app using intune

I am trying to Set up a per-app VPN in Microsoft Intune for iOS devices
but i dont seem to be able to find any document to be able to complete the configuration
because Palo Alto Global protect is not part of the intune VPN connection type.

Is there a w

How to measure live https throughput?

I want to measure https throughput to decide the sizing for decryption. what is the most effective commn=and to dispaly the stats?

TIA

Support Portal User Role Matrix

Hi Community,

we are experiencing a strange phenomene on our PA-7050.

We recently upgraded from 7.1.4 to 8.0.8 and have the following problem:

1. User with securityadmin rights cannot save changes made on the firewall. They are receiving "You don't have p