MineMeld and dinamic list in Pa500

Hi,

We have a Pa500. It read that only permit 10 list with a max 5000 ip's.it is right?

I have deployed a MineMeld with default configuration. I have a list configured in Pa-500 https://ip-minemeld/feeds/inboundfeedhc.

License for SSL VPN (GP Client)

Hey guys,

We have a PA 200 as lab firewall and I want to setup SSL vpn.

Can you tell me which licenses I need for it?

The GP window (Device -> GP Client) is completely empty. When I check for new versions, it says "The device does not have support".

group mapping lost suddenly

Seems like a bug any one faced in 7.0.9. We have several firewall and 2 time it happened group mapping lost suddenly and we have manaually refresh to get it it back.

change webcertificate

Hi,

Testing with Rome release I notice we need to have trusted CA on the Minemeld webserver. You can't use the Minemeld default certificate to import on the PA firewall.

So I had to manually change certificate in the NGINX. 

Maybe this could be inc

what if minemeld feed is not working

What happens if if whitelist some IP and then MineMeld is shutdown ? Will source or destination in the rule be replaced by 'any' ?

Policy Rules order

Hi there,

if we are going to the tab "Policy" we will see 7 different sub tabs. The tabs are:

Security

NAT

QoS

PBF

App Override

Captive Portal

DoS Protection

So I know for example that Security rules are always checked before NAT rules but whats about the

Palo alto networks Problem Session out

Hello ,

I have a problem with my firewall PA-200. When I try to open the GUI , I found an error message with a session out . You can find in the attachement this error message .

I read that may be this problem can be related to the disk space. I do a

Concurrent users cannot connect

Hello,

GlobalProtect GW with x-auth is enabled for IPsec VPN client services. However, only one concurrent session per user is allowed and any subsequent sessions disconnects the previous session user. Same issue happens whether the user is a local a

dynamic access lists based on source IPs ?

MindeMeld or EDL (external dynamic list) in general can whitelist Office 365 but only per destination. Is there a way do build dynamic access lists based on source IPs ?

Issues with enumerating UPN

Tips & Tricks: Using URL Filtering to Globally Block URLs but Allow Other Traffic

Under the URL category of "educational institutions"(set for alert) we are generating a enormous amount of logs identified with an application of “windows-remote-management”. I currently have modified that category to "allow" which eliminates all log