Centralized User ID Agent to All firewalls with AD integration

Dear Community,

Kindly note that we would like to achieve AD integration through centralized user id agent ,in that all of the firewalls will have userid agent which is integrated with AD.

So basically userid agent work as a proxy, How this can be ac

SSH Brute Force and IP exception

I have vulnerability profile with action for High severity signatures as "alert".  I then configured an exception for SSH Brute Force (ID 40015) as "block-ip, src and dst (30 mins)". Everything worked well until we had issues for the systems exiting

NTLM authentication problems

Hello,

I`m trying to configure NTLM Authentification over Captive Portal for users in my network. I have PA-500. I set the next configuration parameters:

1. LDAP Server Profile

2. Authentication Profile

3. Authentication Policy (Authentication enforcemen

Logs not appearing in WebUI (likely nginx configuration fault)

Let me preface this by saying that I'm awre i've introduced this fault through my own modifications (and lack of experience with nginx). That being said I'd appreciate and insight into how I've broken this function.

Symptom is that the 'LOGS' tab on

Pan-OS 8.0 and PA-200

Has anyone upgraded a PA-200 to PAN-OS 8.0? If so have you seen a performance hit at all? Notice a difference in how long things take? Commits? Response time? How long did the upgrade take? Did it take the 50-60 minutes Palo says? If so is that sitti

BGP peers transit sessions flapping

Hi Guys,

PA-5050 is a transit device for four BGP peers. Had no flapping since 2015 on PAN-OS 6.0.12. After upgrade from 6.0.12 > 7.0.11 BGP peering no longer stable:

Can anyone advise something? Apart of the increasing a timeout session under the a

GlobalProtect Patch management Issue

Hi everyone,

We have a (HIP) check list of security requirements (joined domain, antivirus version etc… ) for our user machines must be comply with this list before our VPN user can access corporate servers. 

We want to add Microsoft Patches (updates

MineMeld sudden_death...how does it work?

I need some help understanding the sudden_death behavior with a MineMeld miner/prototype.

From the documentation[1], I understand that sudden_death is designed to immediately age out indicators when they disappear from a feed.

Is it comparing the cur

PA-200 Pan OS 5 12 **anyone with a config file?**

I've about ripped out enough hairs no matter what config or method or video i try my setup doesnt work. I know its a check box or something.

I just want a basic/simple config

I'd like all ports 2/3/4 usable on same subnet with nat/dhcp

port 1.1 as wa

Application & URL Filtering/ Blocking

Hi

I've been this question, and I'd assume we'd need to block under both but I just want to make sure.

If we block a URL e.g dropbox, does this block the application as well or do we need to double up and also block the application itself under file

DUAL ISP Failover Single VR

I have a situation below and I need to be able to configure failover, seeking some guidance.

Basically I have

SG3 (two ISP's in the same VR)

ISP1 (eth1/7)

--------------> WAN-VR2

ISP2 (eth1/8)

Then I have a whole bunch of other sub interfaces on the LAN

update.newinfoclientstack.com

I looked in the threat database and PA classifies this URL Inbox  update.newinfoclientstack.com as maleware. Is there a way to know if this is covered by the threat prevention subscription? There were no details in how to deal with it in the database