General Topics

MineMeld not loading after installation

After succesfol installation of MineMeld in a Debian9, by using this article: https://github.com/PaloAltoNetworks/minemeld-ansible

When accessing to HTTPS://IP_Address it stays forever loading (showing the loading "M"). I can't see any error in the

Virus/spware download blocked but no threat logs

Hi

When users are accessing internal portal then they are getting "Virus/spware  download blocked" on browser with file name (althrough they are not accessing this file) but there is no virus/spyware logs in threat monitor tab.

Any pointers how to fi

nbar

Hi,

What is the NBAR equivalents in pa- qos or how does it works in PA

Thanks

IP Wildcard in custom report?

I have a custom report, I need to exclude 40 Instances of

192.168.x.100 to dest port (1234 or 1235)

is there a short way to do this or am I faced with 40 repeating lines like this....

( addr.src notin 192.168.10.100 and ((port.dst neq 1234) or (port.

Log forward without internal logging?

Should it be possible to LOG forward without having internal logging?

Some stuff I need to be able to deal with on the firewall, but others I just want recorded long term.

Seems to be no option to do it.

what NAT and Network config

Hi,

I have a router from my carrier. This gives me an internal IP 10.0.9.3 /16 from my internal Network 10.0.0.0/16 network and the GW IP he gave me is 10.0.30.99.

Now he makes natting so i could get internet access and there i have a static official i

Skype for Business not work if use SSL Decrypt

Hi,

Is it possible to exclude Skype for Business application from SSL Decrypt?

Custom No decrypt URL category is not an option because new clients with on-premises Skype instances coming constantly.

br

Toni

How do you disable Layer 7 inspection?

If I wanted no layer 7 inspection for a particular IP at a certain port - how can I do that without Application override? Thank you.

Any special instructions to move A/A firewalls from 7.1.x to 8.0.6 via Panorama?

Greetings all,

Title pretty much says it all but we're wanting to move to 8.0.6 since it is a Palo Alto support recommended version.  We're currently running 7.1.4 I believe with both of our active/active firewalls.  Panorama is already on the 8.0.x

Panorama scheduled config-export failure with 20 character SCP password.

I noticed my Scheduled config-export backups were not working.  At some point they were working file.  Upon Further troubleshooting I found that the Panorama scheduled config export was failing because the password was 20 characters long.  Upon chang

How to Block weak ciphers?

Can PA be used block weak ciphers at zone or server level?

Mixing App-ID and Service

Am I correct in assuming that if you use App-ID you can't also use TCP sercice ports to allow aditiona other services on the same rule.

Thanks

Rob