General Topics

Chroomebooks and Transparent Authentication

We are a school district with 2-3,000 Chromebooks.

Currently, we have a Palo rule based upon subnet that applies correct filtering policy. The problem is that we can't see which user is logged in, only the IP address.

Does anyone have a solution for

...

Custom Report for Phishing Attempts

Folks,

Trying to make a custom report for phishing attempts in PANO. At a loss on how to do it for our 60+ devices.

(LIke a daily report).

Anyone here have any input? Couldnt find anything on the web for "phishing" specifically.

Thanks folks...

upgrade path for 5020

Hi

we have a requirement to upgrade a 5020 HA pair from 6.0.5-h3 to 6.1.15.

Can I confirm that 6.1.0 is the only interim release needed?

thanks

We get a bunch of threat alerts from a single source IP from time to time, like someone running a script on or scanning a specific host for vulnerabilities. Some traffic is allowed through to the host. Does anyone know of a way to put an IP in a time

...

MineMeld Miner's no worky...

MineMeld Guru's,

Any advice on why Miners aren't downloading indicators is much appreciated.

Here's where I'm at...

-Running version 0.9.30

-System tab says everything is running

-Nodes claim they are connected but haven't pulled in any additional indica

...

Is is possible to have ACC assign different APP RISK based on the zone?

I would like to be able to assign a different RISK rating on the same app, say RDP.

If RDP is seen on the management zone I would rate that as a RISK 2, however if seen on the Internal zone I would rate that as RISK 5. Does anyone know a way to do th

...

PA is sluggish

I have removed a lot of rules and am down to 400 rules, I am up to OS 7.0.10 and upgrade the OS every other month

In the las couple months the PA seems to be getting slow and not as quit to commit changes or to pull up the dashboard when I first login

...

Resolved! Traps Pricing

Does anyone have a rough idea of how much traps runs per endpoint. We run roughly 800 laptops and desktops that this would be deployed to but I'd like to get a rough idea of pricing to determine if this is something that management would actually try

...

BFD in Active Active HA

Figured this out the hard way. If you create a custom BFD profile in Active / Active HA mode, the BFD profile names need to be unique to each device. If you try to configure a BFD profile with the same name on both devices, BFD will not come up.

...

Unable to navigate to Google sites through Google Chrome

My users in the past few weeks have not been able to navigate to any Google sites through Google Chrome. It started out to be one person and now every day I am getting new users. This is only occurring at my Corporate office and the only thing in c

...

Resolved! "decrypt-unsupport-param" error on Inbound SSL Decryption

I am trying to get inbound SSL decryption for our web server. I imported our web server's SSL certificate with private key to the Palo. It shows "Valid" and the "private key" checkbox is checked.

But the log shows it is not getting decrypted, and I'm

...

Minemeld not pulling low and medium confidence feeds?

Hello,

My firewall is able to pull several feeds from our minemeld server. However, it is not pulling our Low and Medium Confidence inbound feeds. Worked with PA support and they said there must be something wrong with our Minemeld server and sugge

...