OCSP responder question

When you generate a certificate for your login page on the Palo Alto and it is signed by a self signed CA... if you created an OCSP reponder should that responder be added to the certificate when you create that certificate for the Palo Alto login pa

Looking for advise, MFA or additional step for access to a server over RDP

I'm trying to add additional protection for users accessing resources on an isolated network. Is there any way that I can utilize our Palo Alto's to accomplish this scenario?

We do use global protect and user-id mapping already, but as an example I w

Design suggestions

We are trying to implement SSL offload using proxy gor our hosted websites, so they can be inspected by firewalls. Management currently is more alligned to SSL offload by proxy rather than decryption by FW and it is working the way below. But with th

Exclude threat from alerting on IPS

How can I effectivly remove alerts for specific threats on our IPS tap?

There are some that we are aware are actualy trivial and can't be fixed but cause a lot of alerts.

Is simply adding it as an Exception on the Vulnerability Profile enough?  I tri

Allow all shorteners

Good morning,

Is it possible to allow all shorteners (bit.ly, goo.gl...). But only shorteners.

There isnt any category for this..

Regards.

MineMeld not loading after installation

After succesfol installation of MineMeld in a Debian9, by using this article: https://github.com/PaloAltoNetworks/minemeld-ansible

When accessing to HTTPS://IP_Address it stays forever loading (showing the loading "M"). I can't see any error in the

Virus/spware download blocked but no threat logs

Hi

When users are accessing internal portal then they are getting "Virus/spware  download blocked" on browser with file name (althrough they are not accessing this file) but there is no virus/spyware logs in threat monitor tab.

Any pointers how to fi

nbar

Hi,

What is the NBAR equivalents in pa- qos or how does it works in PA

Thanks

IP Wildcard in custom report?

I have a custom report, I need to exclude 40 Instances of

192.168.x.100 to dest port (1234 or 1235)

is there a short way to do this or am I faced with 40 repeating lines like this....

( addr.src notin 192.168.10.100 and ((port.dst neq 1234) or (port.

Log forward without internal logging?

Should it be possible to LOG forward without having internal logging?

Some stuff I need to be able to deal with on the firewall, but others I just want recorded long term.

Seems to be no option to do it.