topology

Hi,

I have the below topology .

Planning to put  PA in vwire mode in betweent the asa and core in active standby.

If r1 fails and asa1 is active and asa2 is standby  ,asa2 will become active .

. Lets say pa1 is active and pa2 is standby .

When asa change

Opened session remains after threat triggered block-ip. WTF!

Hi, I've been testing the block-ip action in spyware DNS signatures. I was an RDP session before the threat triggered the block-ip action. Then, no more connections are allowed (what is OK), but the RDP session remains open.

Is this a normal behaviou

Trail Softawre required

Dear All, i need trail software of PA,for vm.How can i get with full features sothat i can test it in my environment

http proxy -session end reason decoder.

All traffic via firewall works fine except http-proxy. PC makes connectio with http-proxy but the proxy session keeps on dropping. session end reason decoder. Is that normal for http-proxy app.

Geo block -- Allow only one country.

How can I geo block all countries except the one where the firewall is. Looking for easier way rather than select all countries

except one and deny.

pa-500 doesn't resolve host in log

Hi,

I have Pa-500 with firmware 7.1.6

I have created dns registers for laptops, pc and mobile phones (inverse and direct zones).

In Monitor/Logs/Traffic. When I check resolve hostname. It resolves sources only for laptops or pc are in domain.

It does

Threat database handler failed & auto-commits failing 7.1.0

Hi Team, 

Had a case related to this earlier. Some backround, 

4000 series - in active / passive

7.1.0 

customers apps&threats licence expired while the passive unit was installing the latest apps version. This resulted in the passive unit failing to co

Confused over EBL size limit

We have a 3020 running 7.0.8 and are experimenting with MineMeld.

As soon as we get close to 5k IPs on the combined EBLs we get an error on a EBL refresh that it's been truncated as it's over the limit.

Palo Alto's own KB suggests that on an entr

Panorama installed as a Centralized management

Hello everyone,

I need help.

I am already have a M-100 installed as a centralized management. Can I use as a log deploy too ? And how I can do it.

Thanks everyone

License Transfer

Hello,

I am not sure if this is the right place to seek this type assistance.

Is it possible to transfer subscriptions from PAN-3050 to VM-300 or VM-500?

The client has a pair of PAN-3050 with TP, URL4 and Wildfire subscriptions which will be expired

URL Reclassifications to Unknown in 20170207.20264

Hello,

I was just wanting to see if anyone else has noticed that in URL DB 20170207.20264 many sites are being reclassified to Unknown?

sites include 

www.maxtend.com.au 

fairfaxstatic.com.au (used for Australian Financial Review website)

cdn.newsapi.co