GlobalProtect HIP not identifying products.

Hi.

I have two different HA-pairs with GP VPN configured on them. I'm trying to get HIP to work on the client, but I'm running into issues.

First issue is there are a number of applications we're checking for including Dell Kace and Comodo AV Suite a

Group Mapping

Included Groups under Group Include list showing full LDAP distinguished name. Would someone be able to advise how to configure a firewall to display "DomainName\GroupName" instead? 

Thank you

Marek

FQDN object refreshes attempted even after objects deleted

I have pair of 2000 series firewall running on PAN-OS version 7.1.7. we have deleted the below FQDN objects from the PA(objects and policies), but still its refreshing and querying the DNS server through the managment interface. i cannot find any kno

Palo Alto Networks - Training Resources Available

I have put together a list of resourcers that are available online to learn and improve your skills on the Palo Alto Networks platform.

Palo Alto Networks – Learning Center

https://paloaltonetworks.csod.com/LMS/catalog/Welcome.aspx?tab_page_id=-67&tab

Syslog-ng issue

I have a Kiwi Syslog-ng server reachable from Palo Alto Firewall MGMT interfaces. I generated a Self-signed Cert on PA Firewall and imported that into Windows' store for use in Secure TCP (SSL) communication in kiwi Syslog Server....but the firewall

Activate logging

Hi,
I can't view in my Kiwi Syslog the traffic from my outside interface.
In my PA-500 I've enabled SNMP in Device -> Management ->Management Interface Settings -> Permitted SNMP Service.
In Operations -> SNMP Setup -> activeted Use Event-Specific Trap

Microsoft glitch

anyone aware of  Minemeld downloading a blank FQDN file then passing it to Palo Alto?

for ofcie365, for whatever reason Minemeld is unaware that Microsoft has a glitch and the FQDN file is blank.

Would either Minemeld or the Palo Alto’s have a

PA-VM Cannot ping eth1/2 internal interface

Hi Guys,

I am running a PA VM with a VM-100 license on vmware workstation 12.5. 

I have the mgmt interface bridged to my network and can access the PA GUI, CLI and the internet. 

For my internal interface i have setup eth 1/2 to vmnet3 and unchecked

ASK: PAN-GP Clients can't reach each other

Hi All,

My GPClients can't communicate to each other, while the intrazone policy is permit.

Anyone has any idea about it?

File blocking in windows shares

Hi Guys,

Please need your support in blocking files when clients tries to copy files from local system to a shared folder on a server.

I want to just allow text files and block all other files from being copied from local to remote server.

Thanks