Palo Alto Forward Proxy?

We presently leverage a fwd-proxy solution that a selection of hosts (2000-3000) on various networks pass through in order for us to funnel them to a few IP's and enforce a more STRICT URL policy at the perimeter. The hosts are managed through GPO.

M

Web Advertisement URL Filtering

I have enabled URL filtering to block web advertisements, but it looks really bad cosmetically on the users end when they get to a web site where the advertisement should be there is big texted block page. Anyway we can eliminate the block page for w

Using file blocking and wildfire profiles together

Hi Guys,

Please can someone explain me why we would use the file blocking profile as well as the wildfire profile on the same security rule.

What i understand is that once the file is blocked then no need to send it for the wildfire analysis..Please c

Enable Multicast IGMP proxy

Hi all,

I've a PA-3020 and i'm trying to configure multicast between 4 zones.

All zones are directly connected to the PA.

ZoneA -> There are all my HDMI - WIFI adapter (Airtame)

ZoneB -> Users B

ZoneC -> Users C

ZoneD -> Guests

When an user is in ZoneB, o

ALG (Application Layer Gateway) and Oracle

Hi,

I've an application who has to query an Oracle database to get information from it. There is a PaloAlto firewall between my application and the DB. 

I actually reach the database, but I can't collect the information that I need. Making a quick tcp

Block Cyberghost IPs

I see a lot of threat (thousands in a few minutes) to one of my webservers from IP 176.10.115.140.

This IP belongs to cyberghost, so probably someone used this to hide his own IP and attack our webserver.

Is there a way to block this traffic (before th

Archive of Release Notes for Dynamic Updates?

Hi all,

Is there an archive of release notes for dyanmic updates?  I've just discovered that a firewall I inherited has a very old version of the Application version.  I'd like to determine just how old it is (so I know how much chaos I'm going to ca

Tagged subinterface in different zone than parent not working

So up to this point I'd only been using tagged sub interfaces for capacity\housekeeping\etc,  so they were all in the same security zone.  Now I have a case where I'd like to be able to add some rules to where traffic from this new VLAN can go.. 

I pu

Panorama License Upgrade

I am currently running Panorama with a 25 device license limit, and I have purchased and need to upgrade to the 100 device limit. It seems the auth code for the 100 licenses is the same as the auth code for the 25 licenses.

When I go to Panorama, Lice