About HULK

Is there any document they have referred to you.? ... View more

As per datasheet, it should give you 4Gbps ipsec vpn traffic with Threat prevention in place. Thanks ... View more

Yes, You are correct. FYI. For a PA-5050 FW 10 Gbps firewall throughput (App-ID enabled 1 ) 5 Gbps threat prevention throughput 4 Gbps IPSec VPN throughput Thanks ... View more

Hello Grubbsy, FYI. ( note: you may also add filters based on ingress/interfaces, security rules etc) You may also check the real time session in the CLI by using 'show session all filter source IP_ADD_OF_THE_TESTING_PC destination IP_ADD_OF_THE_DESTINATION'. >  If there is a session exist for the same traffic,  then please apply  CLI command PAN> show session id XYZ   >>>>>>>> to get detailed information about that session, i.e NAT rule, security rule, ingress/egress interface etc. Hope this helps. Thanks ... View more

Hello Panlst, As per my understanding, IPSEC throughput should not have any additional effects when the FW is enabled with TP. . Similar discussions for your reference: Re: What is Threat Prevention Throughput? Could IPsecVPN throughput effect FW or TP throughput? Hope this hwlps. Thanks ... View more

Hello Marco , I just want to prove that you are right. ( With evidence) :smileylaugh: Thanks ... View more

Hello Marko, FYI. Reference DOC: GlobalProtect Configuration Tech Note --- Page No 3 Thanks ... View more

Hello Satish, Based on your problem description, it looks, you want to change credentials on GP clients when there is a change in your AD for the corresponding users. If so,you have to uncheck SSO ( single sign on) from portal configuration ( Network > GP portal > Genaral) and use connect method as "on-demand mode". So, while the GP user will initiate the GP connection, he may manually change the saved username/password on GP agent.  •on-demand—Select this option to allow users to establish a connection on demand. With this option, the user must explicitly initiate the connection. This function is primarily used for remote access connections. •user-logon—When this option is set, the GlobalProtect agent will automatically establish a connection after users log in to their computers. If you select Use single sign-on, the username and password used to log in to Windows is captured by the GlobalProtect agent and used to authenticate. Hope this helps. Thanks ... View more

Hello Johan, Could you please try to clear URL cache from this PA  firewall. >clear url-cache all >delete dymanic –url host all Even after applying above command, issue persists, then apply below command. ( it will not impact to your production traffic) >debug software restart device-server Hope this helps. ... View more

FYI.. ... View more

Please follow below mentioned DOC to implement SSL decryption: Controlling SSL Decryption How to Implement SSL Decryption Thanks ... View more

Since, this is SIP traffic, please check address with Call-manager and EPBX address. Thanks ... View more

Is the victim and attacker address is trusted IP addresses on your network...? If so, then it might be a false positive and you can add an "exception" to your vulnerability profile to  avoid such logs in future. But, if those addresses are unknown, then you may open a support ticket to verify the traffic/signature. Hope this helps. Thanks ... View more

Hello martinriveran , Could you please provide some more detail information regarding this threat. You can go to Web-UI of the PAN firewall and open Monitor > Logs > Threat. Open the threat and take a snapshot. Thanks ... View more