Purge queued email?

Can anyone fill me in on how to purge queued emails?

User-id not working correctly

Hi All!

i have a issue with the user-id feature: some users are not recognized by the PA device: if i check the logs searching for the username i see the last access some days ago, but if i search for his ip he is doing traffic.

Even checking via CLI

joining paloalto firewall with active directory

Dears ,

please we need your help to join paloalto firewall with active directory and use all user's IDs instead of user's IPs in the access list in paloalto

Untrust to Untrust

Should the untrust to untrust be denied. As the defalt interzone traffic allows everything.

untrust to untrust rules for us are ether used for IPSEC or global protect. It seems to me blocking this traffic effects detecting SCANS.

Security profile group best practice

HI guys, I've read most of the reference material by Palo alto only applying security profiles on inside->out security polices but not outside->inside polices. I would think that is a given since outside->inside policies are to protect your front fac...

No wildfire submissions (FWD_ERR_CONN_FAIL_PUB errors)

Hi there,

Wildfire is not submiting files. I have the simplest configuration possible, and I'm using the test file (https://wildfire.paloaltonetworks.com/publicapi/test/pe). However, nothing is getting to the portal, or logs for that matter.

I'm runn

Configure GlobalProtect With Public IP adresse

Hello

1-i have the router adsl with the public ip adresse : ex 41.137.11.123 (WAN interface) ==> this is a Public/fixe IP adresse.

2-i have a paloAlto firwall, is connected by its wan interface (192.168.1.2) to the local interface of the router adsl (

Log forwarding "Zone Protection" ?

I can't find an up to date way to enable log forwarding for "Zone Protection" profiles.

I found a guide for 6.1 but its not relevent for 8.0

I want alerts when we get port scanned.

Cheers

Rob

SSL Decrypt and GitHub

I keep fighting this SSL Decypt issue with my PAs, its almost getting to the point where its not worth running the SSL decrypt function because it causes so many issues. I am currently having issues with people downloading a zip file from git hub. 

g

Port analyse by TCPDUMP

Hello All,

I would like to capture packet by tcpdump on other interface than management interface.

How can do it ? (please explain more detailled as possible).

Thanks for your help.

GB.

Global Protect and Bandwidth Considerations

Looking for feedback on what you all have experienced with GP VPN for a user count of over 2k users. 

Specifically what type of INet circuits that were needed.  What was the amount of bandwithd which was seen on the circuits?  Finally, is there any s