connections firewall to ldap

Hello, i need your help. Iwould like to know how the ildap connection woks. Why are there connections between the PAN directly to the pc and does not go through the AD server?

Is this behavior normal?

The security departament says it´s not normal or th

Remote Desktop Services Vulnerability (CVE-2019-1181, 1182, 1222, 1226)

Anyone know which Content Update (released or upcoming) might contain a mitigation for CVE-2019-1181, 1182, 1222, 1226?

I understand there was an original advisory -> CVE-2019-0708 but I'm wondering if there is a specific update for the more recent a

Application risk factor

Is there any document explaining how and why an application is assigned a certain risk factor?

DNS Sinkhole - What constitutes investigation?

I have implemented DNS sinkholing and am curious what constitutes investigation. I am seeing some clients hitting the sinkhole but only for a short period (1-2 minutes or less).

I'm not sure if these could be drive-by download attempts, or what they

CVE-2019-9511 Multiple HTTP/2 implementations are vulnerable to a variety of denial-of-service (DoS)

Why are APPID and Threats not Separate Updates?

Don't tell me how to fix this, I already know how it works.

I need to know why Palo Alto does not have a separate APPID update and Threat update just like AV and WF are separate. 

Using PA as an everything device we actually need Vulnerability and Ant

How to test DNS Security Properly?

In reading up on DNS Security I found that URL's provided for testing in the following document, Enabling DNS Security, do not accurately ensure DNS Security feature license is installed and configured. A very accurate indicator of this is that all o

PAN-SA-2019-0013 Mitigating Control

Does restricting the management interface from external exposure reduce the likelihood external exploitation of this vulnerability?

DNS logs

Is there a way to view and/or log dns queries and responses (outside of anti-spyware rules)? The passive DNS telemetry configuration seems to do what we want but those fqdn to IP mappings are sent to Palo and it doesn't appear that we can view what f

Traps CVE-2019-0708

Does Traps offer protection against CVE-2019-0708 ?

Credential Phishing Protection troubleshooting

hey community - 

tearing my hair out here...I've set up a RoDC in my environment and added a test group to the allowed password replication group.  I've configured the user and credential agents on the RoDC and they say connected to my firewall, and