General Topics

Global Protect, Radius, SecurEnvoy, question

We had a strange issue with our 2Factor breaking this week, logs looked to be showing a radius auth MD5 missmatch. Between PAN 3020 and SecurEnvoy.

During that time we had to many hands on the issue, and feel the team made it worse...

So some back gr

...

Services

Is there anyway in the traffic monitor, or the ACC or any other logs to see what services are being hit? I can see applications but not specifically services though to can add specific services in the rules

Fan failure in Palo Alto SNMP monitoring

is it possible to monitor through SNMP oids for Fan failures in PA 200, PA 500 and PA 5050.

Should we use different oid for each platforms.

Resolved! Difference between inbound and outbound direction

I noticed that some IP prototypes have a direction of inbound (spamhaus) while others are outbound (ransomwaretracker). What is the difference with respect to being able to use them in feeds for EDLs?

Thanks,

Mike

GoToMeeting no longer working, http-proxy blocked

I'm using PAN-OS 7.1.8 on a active/passive HA cluster of PA-3050 devices for the perimeter. Just recently, people started complaining that GoToMeeting no longer works. When I investigate a test session (http://help.citrix.com/getready), the sessio

...

Resolved! Time miner checks feed

Hi

Which is miner checking feed fixed or random ?

If time is fixed, would you teach me schedule time ?

Regards,

Naoya

Subscribing to taxii output?

We're trying to subscribe a few products to taxii outputs and so far we're not having any luck. Some questions which might help here are:

1) How do we enable authentication on outputs? There are warnings about it in admin and whatnot, but I'm not p

...

Resolved! How to change the config remove all the O365 miners from the O365 configs except for office365_O365

I want to get only "product name = o365" in the list of https://support.content.office.net/en-us/static/O365IPAddresses.xml

Regards,

Naoya

iperf is always matched as unknown-udp/tcp

Is there any reason why iperf traffic in either TCP or UDP is recognised as unknown-udp/tcp by the PAFW?

there is an app-id called 'iperf' but it never matches.

Resolved! Message of the Day Updating?

So I know that one can go into the GUI and easily update the MOTD, problem is I'm not usually in the GUI for anything on my devices. Does anybody know how one can update the MOTD through the API or CLI, I could have sworn that I found it in the CLI a

...

Palo Automation

Are there any Automation white papers in regars to Palo Alto and automation tools. Outside of VM Series, Lambda, and Tufin Orcharstartion suite?

Resolved! Clear a Commit in PAN OS 7.0.5-h2?

Hi folks,

Trying to figure out if there is a way to clear a Commit in PAN OS 7.0.5-h2?

I see there is mention of it in the PAN OS 7.1 New Features guide.

https://www.paloaltonetworks.com/documentation/71/pan-os/newfeaturesguide/management-features/com

...

Resolved! IPSEC interoperability between PAN and Cisco 5510 ASA

Hi,

We have a site A with PAN Firewall and site B with Cisco 5510 ASA. IPsec VPN tunnel is built between these 2 sites.

In certain occasions, we have the ISP site B network link up, but the users is experiencing no internet in siteB. As it is only a

...

Resolved! Scheduled SaaS Report

I feel I must be missing something obvious with the SaaS report. I have set a schedule up to create it weekly and if I hit "Run Now" I get the nice graphical report, but if I view the output of the scheduled run , I get a very plain tabular list of

...

URL filtering - proper format of URLs in the block list

Hello everyone,

Blocking the URL below would be in the right format? Without the http:// or https://

www.spotify.com/sg-en/download/other

It just got me confused a bit with the "TIP" displayed in the URL Filtering Profile screen, putting a slash at th

...

Discussions

Global Protect, Radius, SecurEnvoy, question

Services

Fan failure in Palo Alto SNMP monitoring

Resolved! Difference between inbound and outbound direction