General Topics

Safe Search enforcement not work with Quic

On a rule with open the following service:

- service-http

- service-https

- udp-443

and with URL Filtering profile where is enabled Safe Search Enforcement

if a user use Chrome, and set up Resctricted Mode = off in youtube site, he can see any type of vid

VPN Issues (IPsec Xauth PSK) after Update to PAN OS 8.0

Good evening,

We've had an issue since we upgraded our PaloAlto 500 to Palo Alto PAN OS 8.0 a couple weeks ago.  If it helps we actually updated to PAN OS 7.1 and then 8.0; so not entirely sure if the problem occured at 7.1 first. 

Windows Global Pro

Tap and Layer 3 mode

HI

I have my PA's looking at TAP from my switches and also L3.  My thought was to look at traffic that wasn't being routed.

But I was thinking what happens to my TAP traffic if I have a policy that allow traffic from zone staff so a L3, but the PA al

How to generate a trial license for VM FW

Hi

How to generate a trial license for VM FW?

Thanks

Global Protect Question

Hi

I am having (a new ) issue with global protect. Now the support person is telling me GP is not setup to allow connection made from the client to the laptop (GP client).

I'm a bit flabber gasted. But hey I could be wrong. The guys is suggesting I n

Miner for STIX using API token

couldnt find the miner of STIX API Token type.

Below is the sample request. Appreciate any pointers to an existing miner and connfig requirement / help to create new miner.

POST /stixapi/recent HTTP/1.1

Host: ncert.nlabs.org

Content-Type: application/x-

PA SSL decryption for web traffic and squid

Hi

Where should I be doing the decryption

client -> pa (l3) -> squid -> internet

or

client -> squid -> pa (l3) -> internet

I thinking the first one, then I can also see who is making the request 

A

DHCP ISP CLIENT

Hi,

I have a DYNAMIC ISP that I will use DHCP Client on interface. I know there is option to add default GW provided by ISP, but I only want to use this default GW for a couple IPS such as peer IPSEC IP. How can I do this with out PBF

Thanks

Can OSPF run without a "true" area 0

I've started working for a new company who uses only static routing. We just turned up a second ISP at one site, but I noticed an issue with failover which is expected. When ISP 1 fails, local traffic at the site routes out ISP 2, but site to site tr

Filtering Microsoft Exchange Server services [Outlook Anywhere, ActiveSync, OWA]

We are using Exchange 2013 and have the Palo Alto allowing https access to it so our users can use OWA and ActiveSync.  We recently discovered that users can also connect an Outlook client to our Exchange server from anywhere (no VPN needed) as long