ICAP protocol for DLP

Hi.Do Palo Alto support ICAP protocol for DLP?i couldnt find any info

PA-5020 factory defaults

Hello!

I have 2 PA-5020 with 5.0 software and want to upgrade them to 8.0. One way to do this is to follow upgrade procedure.

Configuration is very simple and can be deleted.

Is it possible to upload 8.0 software using GUI, boot firewall in maintenan

MTU Packet counter increases during packet capture

Hi

Doing some analysis and whilst doing a packet capture I notice that flow_fwd_mtu_exceeded  starts increasing rapidly.

Any ideas?

Thanks

David

show counter global filter packet-filter yes

flow_fwd_l3_ttl_zero                   15996        0 drop  

Questions on Mindmeld tasks

Hello,

I have one question, for the community.

I can you search for an IP Address in all of your feeds, to find a specific IP.

Thanks,

OCSP responder question

When you generate a certificate for your login page on the Palo Alto and it is signed by a self signed CA... if you created an OCSP reponder should that responder be added to the certificate when you create that certificate for the Palo Alto login pa

Looking for advise, MFA or additional step for access to a server over RDP

I'm trying to add additional protection for users accessing resources on an isolated network. Is there any way that I can utilize our Palo Alto's to accomplish this scenario?

We do use global protect and user-id mapping already, but as an example I w

Design suggestions

We are trying to implement SSL offload using proxy gor our hosted websites, so they can be inspected by firewalls. Management currently is more alligned to SSL offload by proxy rather than decryption by FW and it is working the way below. But with th

Exclude threat from alerting on IPS

How can I effectivly remove alerts for specific threats on our IPS tap?

There are some that we are aware are actualy trivial and can't be fixed but cause a lot of alerts.

Is simply adding it as an Exception on the Vulnerability Profile enough?  I tri

Allow all shorteners

Good morning,

Is it possible to allow all shorteners (bit.ly, goo.gl...). But only shorteners.

There isnt any category for this..

Regards.