Blocking RDWeb brute force attempts

Hi,

we have a customer that's under a slow brute force attempt by a persistent party. Blocked their IP several times, but they switched and even started using multiple addresses at the same time now.

It's doing around 3 to 4 attempts per second per

Typo'd a serial number and unable to remove from account

I have never touched a firewall until today. I added my serial number to our account and put a 6 instead of a 5 for one of the numbers. It took the devices serial number and that device is now in our account. I added the second, correct one to our ac

Superuser (read-only) Not authorized to access

Hi everyone,

I am trying to get TACACS working between our PA and Aruba Clearpass authentication server. I have successfully done this for full admin as well as a custom role on the firewall. I am however running into issues with a service account

How do I get a website's risk level lowered, since we know it is safe?

Earlier this week, I submitted a website that was blocked because it was categorized as malware incorrectly.  This was corrected very quickly. Now that same website is blocked because it is listed as "high risk".  We know that it is not. When I tried

Intermittent UserID - Syslog Parser -

Anyone see this behavior? we are using syslog parser string for userid, no logout action, timeout set to 45 minutes ( default). You can see here that a flow within the same second shows a userid and then blank with same source address. FW running 10.

Active Directory groups w/ members from multiple domains

I'm using AD groups for some security policies and am expanding to use other domains in our company. While I can add users from another domain into an AD group, the PA only shows me the users in the same domain as the group.  For example:

Domain 1: DC

PAN-OS 10.2.11 Device -> Setup page missing

Hello!

I just upgraded my PA-220 to PAN-OS 10.2.11 and the Device -> Setup page is missing. (See attached photo). Has anyone else run into this or is it a browser setting on my PC?

Security policy not working properly

Dear Friends,

We have a customer who created one security policy and in that security policy he added only firewall and Panorama IP as source IP address.

Issue is that, when we are looking at the traffic logs then in that logs traffic of different

could not unlock user

Hello,

I'm sure this has been asked before, but I can't find an answer.  Get a message of "could not unlock user" via gui.  Is there any way to unlock an individual user via CLI?  I'm on PAN 10.2.6

Thanks

Rich

Anydesk issue.

Hi everyone!
I have some issues with anydesk application. It has ssl issue because of decryption, I think.

I've added *.anydesk.com ind 'SSL decryption exclusion', but it didn't worked.

Maybe some of you have faced such kind of issue?

Thanks in advance!

Replacing PA-5220 with a PA-3410 and need the best practice to migrate over configuration

Replacing PA-5220 with a PA-3410 and need the best practice to migrate over the configuration. Obviously the network interfaces are different and will require some cleanup, that and I know to match the PAN OS in the devices to avoid possible complica

Teams false positive - Virus/Win32.WGeneric.ejjvpg(656943132)

Seeing hundreds of alerts relating to a teams msix and this threat signature -  Virus/Win32.WGeneric.ejjvpg(656943132)

Any one else experiencing this?