General Topics

users not able to login via LDAP

Hi All, I am stuck in a situation.I need my users to access PA GUI only when it is authenticated by LDAP server. Configured following :- 1. LDAP server profile2. Created authentication profile3. made a user by name xxx and bind auth. profile with it.4. test authentication with CLI is also successfull. Except admin nobody is able to login . any s...

Autologon to GP on Windows 7

I am trying to configure GP client to logon automatically as soon as Windows starts. Is there any way ( services/bat files etc..) I can start GP, pass user credentials and connect to GP as windows starts ? I have a remote PC which I want to be connected to GP without having to get some one to "click" connect everytime it restarts !

Resolved! wildfire testing

Hi I tried downloading this https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Test-WildFire-with-a-Fake-Malicious-File/ta-p/60925 It shows up as being submitted to wildfire, but doesn't get blocked. is that the right action ?

Create a xml of the current config

Hi I wanted to move some pre-rules to post rules in my panorama config.I wanted to try and do it with load partial. But I am having issues generating the xml files I ssh to panoramaset cli config-output-format xmlconfiguresave config to 20170625-AlexWorking.xml and then exit out of configshow config saved 20170625-AlexWorking.xml doesn't show me...

Resolved! Asym routing and policies

Hi If I have a TCP stream that is initiated and because of routing changes now has to flow through my PA, how to I allow this through. On my other firewall's I can allow non SYN and SYN/ACK through but block SYN's.. How does one do that on a PA with policies ? Alex

Resolved! Panorama 8.0.2 Managing PAN-OS 7.1.10 - Aggregate Ethernet AEx has no member interfaces

Hi All, I am currently working with customer, who had an existing Panorama implementation that was upgraded from 7.1.7 to 8.0.2. The reason for the upgrade was due to the certificate expiration, take too place on June 16. The new HA pair I am implementing are running PAN-OS 7.1.10. I need to configure an aggregate interface in the HA pair for th...

Screen Shot 2017-06-24 at 11.13.40 AM.png

Screen Shot 2017-06-24 at 11.28.55 AM.png

Problem with Autologon GP on Windows 10

Hi all, We have an issue with windows 10 machinesw and autologon in GP. When we powered on win7 machine the first time it took user credential properly an logon on the system automatically. On Win10 we need to login the first time manually, the following times w10 logon automatically well. Someone knows if exist any problem on w10 machines and a...

Can I see bandwdth by zones?

Hi everyone, I have a customer's requirement about bandwidth monitor between zones, can we do this analysis with NGFW?Thanks in advanced!

Create Policy Report based on CIDR

Hello Is it possible to sort policies by CIDR and create a report that-lists the policies - displays the IP, not the group (if in a group) I'm trying to do this using Tufin's policy analysis but it's not working out. thanks in advance...

Global Protect Very Slow

I am checking to see if anyone in the community can help before I try tech support. I have noticed recently the clients using Global Protect are have VERY slow performance. My tests at home show that I am getting 100mbps download without the Clobal Connect connected and 1.5 mbps with it connected. I have tested multiple devices from multiple l...

Question to Wildfire appliance

Hey all, I have some questions to the wildfire appliance: https://www.paloaltonetworks.com/documentation/60/wildfire/wf_admin/wf-500-file-analysis/about-the-wf-500-wildfire-appliance We don't use the public wildfire because we are not allowed to send secret files into the cloud because of strict data security policies. So I thought to use the on...

GlobalProtect SSO and 3rd Party Credential Providers, What did you do?

Hello, We recently installed Palo Alto firewalls (3000 series) and are currently working on our VPN configurations.We have multiple 3rd party credential providers including drive encryption and Windows single sign on. One of the selling points was the ability to have SSO VPN and full tunneling of the traffic on our laptops while off site. We ha...

Resolved! Policy Based Forwarding vs Security Rules

Hello, I am not quite sure about the difference between rules created under 'Policy based forwarding' and 'Security' under Policies tab. Could someone please help understand how are the rules different that are created under security and Policy based forwarding? Thanks,PS

Important information regarding Content Apps & Threats version 709 -dataplane restart

I just move to 7.1.9 about a week ago and there seem to be warning of issues with dataplane restart and I thought it was related to the threat version 709 and I am now on 710. I have seen no issues so do I still need to upgrade to 7.1.10

Resolved! OID for CPU/MEMORY on PAN 5050

I'm looking for an OID to use for monitoring the CPU/MEMORY utilization with my NMS system. My MIB walk didn't turn up anything useful. Thanks,

Discussions

users not able to login via LDAP