General Topics

Resolved! Difference between inbound and outbound direction

I noticed that some IP prototypes have a direction of inbound (spamhaus) while others are outbound (ransomwaretracker).  What is the difference with respect to being able to use them in feeds for EDLs?

Thanks,

Mike

Resolved! Time miner checks feed

Hi

Which is miner checking feed fixed or random ?

If time is fixed, would you teach me schedule time ?

Regards,

Naoya

Resolved! How to change the config remove all the O365 miners from the O365 configs except for office365_O365

I want to get only "product name = o365"  in the list of https://support.content.office.net/en-us/static/O365IPAddresses.xml

Regards,

Naoya

Resolved! Message of the Day Updating?

So I know that one can go into the GUI and easily update the MOTD, problem is I'm not usually in the GUI for anything on my devices. Does anybody know how one can update the MOTD through the API or CLI, I could have sworn that I found it in the CLI a

Resolved! Clear a Commit in PAN OS 7.0.5-h2?

Hi folks,

Trying to figure out if there is a way to clear a Commit in PAN OS 7.0.5-h2?

I see there is mention of it in the PAN OS 7.1 New Features guide.

https://www.paloaltonetworks.com/documentation/71/pan-os/newfeaturesguide/management-features/com

Resolved! IPSEC interoperability between PAN and Cisco 5510 ASA

Hi, 

We have a site A with PAN Firewall and site B with Cisco 5510 ASA. IPsec VPN tunnel is built between these 2 sites.

In certain occasions, we have the ISP site B network link up, but the users is experiencing no internet in siteB. As it is only a

Resolved! Scheduled SaaS Report

I feel I must be missing something obvious with the SaaS report.  I have set a schedule up to create it weekly and if I hit "Run Now" I get the nice graphical report, but if I view the output of the scheduled run , I get a very plain tabular list of

Resolved! Converting Cisco ASA Access Lists to PAN

Is there an easy way to convert a Cisco ACL to PAN format. Right now I have a 70 line ACL and it looks like each ACL will require 14 set commands. At this point I'm thinking it might be easier to just enter the 70 ACLs into the PAN via the GUI. 

Any o

Resolved! non-syn-tcp global, zone protection profile but still Allow in the traffic logs.

Hi All Experts,

Looking for advice here. Want to block non-syn-tcp packets. Global settings are:

> show session info | match non-SYN

  TCP - reject non-SYN first packet:             True

Zone protection profile in place:

But still Allow in the traf