General Topics

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

PA 7.0, GP and RSA-ID double authentication

Hi,

There is a deployment with RSA-ID as OTP and GP as VPN client (3.1 or 3.0). PAN-OS version 7.0.14.

After the recent upgrade from 6.x to 7.x an issue showed up - when authenticating from GP - login information is asked twice.

This seems like a known

...

Best way to prevent brute force attacks (LDAP) on public facing Microsoft RDWeb login page

We are using Server 2012r2 RDS gateway and have the PA configured to with a security policy to allow the untrusted traffic (ssl, rds, http) that is NATed to the internal rds gateway. We are seeing a lot of failed audits in the logs on the terminal

...

Resolved! SSL decryption & not working VPN

Hi guys,

We wittnessed a very strange phenomenon this morning.

First we received a call that our VPN gateway was not accepting any VPN connections.

At the same time we received calls that certain websites were not accessible. These websites had in comm

...

How to ignore routes learned by OSPF

I would like to ignore some of the routes learned by OSFP so they don't install in the forwarding table. Important, I'm not talking about suppress/filter routes that my PA announce through OSPF.

For explaining me better, I'm looking for "OSPF Inbound

...

Problem with nodes minemeld

Hello,

I have problem after restarting minemeld it works for about 3 hours and them i can`t load nodes tab. I have loading indicator but nothig happens.

Does anyone know what is going on?

Best Regards

Adrian

Resolved! Testing HA with unsupported PA-200 devices?

Hello folks,

I am considering buying a couple of PA-200 devices from Ebay to some testing and self training.

They do not come with support or licensing...

Would I be able to configure HA (lite) on these devices?

Does HA configuration require both devic

...

Mindmeld @ Financial Institution

Anyone using Mindmeld at a financial instutution? Or, know someone who is?

Don't forget to drop me a like.

Resolved! PA DHCP log search

Is there a way to do a specific search for and IP address or mac address in the DHCP logs? I can find and get into the logs but I have to manually look through all the logs to find what I need

Block youtube videos after allowing 5 videos.

Is it possible to allow a user say only 5 youtube video/day and then send customer page saying you have used your 5 videos for today or if someone is watching video for 1hr and then stop youtube video access.

Application dependency

if I'm denying BitTorrent traffic do I need a rule as well for its web-browsing dependacy?

Application vs Services

Hi All,

I have probolem with dealing with security policy ..

i need to allow telnet to specific ports range (2001 - 2005) but by defining them at services field it is working fine but i cant use ping or any other applications even my application foed

...

Resolved! Custom Vulnerability Protection

Hi,

I've made a custum VP and included into my VP group. In security policy I have applied the standard one (NOT my personal VP) to a security policy but when I go in monitor threat I see that matched also the custom VP. Why??

Resolved! IPSEC question

Hi,

I have an existing site with Cisco ASA IPsec tunnel to my HQ Site with Palo Alto firewall. Users at the existing site obtained their IP
address via DHCP Server configured on the ASA.T he inside interface is G0/0 with 10.10.1.10/24 and outside inter

...

Resolved! No indicators for output

It was found that output (high, medium and low) have not incidcators event aggregator has over 2xxxx indicators. Please see attachment.

How to resolve it? Many thanks!

Resolved! Inter Vsys Routing

Hi,

I have to configure Inter vsys Routing where the traffic has to leave the firewall fromone vsys and enter into another Vsys. I am not able to find any documention on this scenario. I have already configured and tested the communication betwee

...

Discussions