General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

One configuration for multiple sites

We are trying to deploy the PA 220 at multiple sites. The firewall will be facing an outside internet connection protecting a production server. Objective 1 is to create vpn accounts for specified users and machines (using MAC addresses) to control

...

Resolved! Layer 3

I am getting ready to set up our firewall at our commany. I have done the free learning curriculum and what I learned was information but it didn't prepare for my first steps totally. I understand that the basic required properties when setting up a

...

Populate Dynamic Address group via XPATH

Hi,

Has anyone succeeded yet in populating a Dynamic Address Group with IP addresses using XPATH?

(API can use 2 methods: an XML file or all info included in one command via XPATH).

Idea is to integrate with Infoblox, which only understands XPATH.

Than

...

How to block sites where to buy/sell crypto coins

Hi,

I'm getting the question of the management to block all sites that are dealing with selling or buying crypto coins.

They are getting tired of it that lots of employees are wasting time to check there crypto coins all the time and buy and sell them

...

Resolved! How to allow RDP with specific port.

Good day.

I am new in handling firewall. We use juniper before (i did not setup).

Before we can remote access (remote desktop protocol) our network. I would like to setup that kind of connection again.

Before on the remote desktop connection, we just

...

Change filename of custom report file

Is it possible to change the underline part of this file ? 11-20171213DailyDroppedThreats.csv. I am trying to automate some data collection and the beginning number "11" seems random to me.

PAN OS 7.1.14 AD issues after update

After update PAN OS to release 7.1.14 we are having problems with user identification.
The user credentials are lost in PA and some access are denied because PA can not identify the user.

Have anyone experiencing something like that on 7.1.14?

DropBox vs DropBox for Business

Can PaloAlto distingvish between DropBox and DropBox for Business ? We are trying to make rules that denys DropBox, but allows DropBox for Business.

Resolved! Configuring subinterfaces from the CLI

Hi,

Is it possible to configure subinterfaces from the CLI? I've been trying different sequences of commands but so far I'm not having any luck. From the GUI I have no issue it is only from the CLI.

Thanks

is there a Stix Taxii service offering by Palo Alto

am new to palo alto, read about Minemeld service a while ago. i understood i need to install minemeld to gather the intelligence but in my case i cannot get another service/instance running in the organization.

can some one tel me if PA has a stix ta

...

Resolved! Certificate failed to load: invalid certificate chain

Hello,

I tried to change some certificates and am getting this error.

Error: Certificate failed to load: invalid certificate chain
Error preparing global objects
failed to handle CONFIG_UPDATE_START
(Module: device)
Commit failed

Any article on how to fi

...

Resolved! Apply Policies to a subnet

Hi,

New here so I hope this is right spot for this question.

I have a router from an ISP that is giving a public /28 subnet out its lan port. (Nat off)

I can't easily replace the device for a couple of reasons.

I wish to run the traffic from this through

...

Resolved! How to exclude IP address or Application from SSL Decrypt

Hello everyone,

How do you add an expecific application when there is no URLs inside the log?, I.E if you check the traffic logs it's showing SSL as Application and no more info rather than a destination IP that could be changing in the mayority of

...

Resolved! Log HTTP Request Methods

Is it possible to pull the HTTP request methods from URL logs, or does this capability not exist on the Palos?

Show all address objects in use in policy

Hello

Is there a cli command available to search for and view all address objects in use in a firewall's policy? I have a firewall that has hit its maximum address objects limit and need to remove unused addresses.

Thanks

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free