- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
10-26-2010 12:51 AM
Hi, if i deploy PAN in tap mode. Am i able to pick up virus or spyware detection like it is deployed in L3?
10-28-2010 10:28 AM
Sounds like a configuration challenge, if licenses are there. This might help:
https://live.paloaltonetworks.com/docs/DOC-1164
Thanks
James
10-26-2010 01:27 AM
Yes you can. You just need to make sure that you have 'threat prevention' license installed on the box.
Thanks,
Sandeep
10-26-2010 01:31 AM
Hi, So basically what i see on PAN traffic on tap is exactly the same as other deployment.
The only difference is that i cant enforce control on tap mode.
Am i correct?
10-28-2010 10:19 AM
I had the same question and found this post. If this is correct, then, I can assume my network is in great shape because not a single threat has been detected in 20 days? Highly unlikely in a wide-open college environment, where students bring their computers in for malware infections on a daily basis. Where would I see this activity? In ACC, under URL Filtering, Threat Prevention, and Data Filtering, it's all "No Data Available" We are licensed for URL filtering and Threat Prevention. Thanks.
10-28-2010 10:28 AM
Sounds like a configuration challenge, if licenses are there. This might help:
https://live.paloaltonetworks.com/docs/DOC-1164
Thanks
James
10-28-2010 11:58 AM
...this very likely seems to be a configuration issue. If the document James forwarded does not correct the issue, please work with your local SE or reseller. As you mention, it is highly unlikely for an open network to not see any threats for several days.
Sandeep
10-28-2010 12:02 PM
Thanks, James and Sandeep. I'll read through this tonight and post back tomorrow.
10-29-2010 05:37 AM
Sure enough - the firewall was configured and working fine through step 3, but no policies had been set up per step 4. Picked up on some interesting activity last night. Thanks for the help.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!