About HULK

Hello Sdw, The above mentioned KB document will give you most of the category mapping between ScanSafe vs PAN-DB (ScanSafe to PAN-DB URL Category Mapping) . You may also verify any unknown URL categorization here Palo Alto Networks URL Filtering - Test A Site Hope this helps. Thanks ... View more

Hello COS, Response page cannot be displayed for HTTPS based application. You may reach out to your SE or sales contact. If there are features we currently don't have but you would like to see added they can create a feature request for you. Hope this helps. Thanks ... View more

Hello COS, This is not an option, it's the packet processing flow in a PAN firewall. Thanks ... View more

Hello Tigran, In order to successfully log into root, you have to generate a challenge code from PAN firewall ( it's like a one time password OTP). With the help of that challenge, a response generator will generate a code and then you will be able to log into the root successfully.So, for a customer, it would not be possible to generate that response code.  Hope this helps. For Example: admin@DADA> debug tac-login challenge Please use the following string as your challenge: XXXXXXXXXXXXXXXXXXXX admin@DADA> debug tac-login response Please enter challenge response (^C to cancel): Thanks ... View more

Hello COS, As per my understanding, the application Block page will only be displayed for http based application except web-browsing. We do require to run Content-Id Decoder which will help to  provide an Application block-page. Thanks ... View more

Check this one: How to Serve a URL Response Page Over an HTTPS Session Without SSL Decryption ... View more

Hello Mike, FYI. Dynamic updates would be "medium" severity logs. Thanks ... View more

Hello Renan, You may need to check your firewall configuration once more. - Need to check the wildfire action, data-filtering profile, security rule where it should be apply. A KB document for your reference: How to Configure WildFire FYI: WildFire CLI commands Once the basic configuration is complete, the following commands provide the details of the best server selected. To test the Connectivity, follow the steps below: > test wildfire registration This test may take a few minutes to finish. Do you want to continue? (y or n) Test wildfire         wildfire registration:        successful         download server list:        successful         select the best server:      va-s1.wildfire.paloaltonetworks.com Initial registration can only be done on the active unit in an Active/Passive cluster. Note: Do not use PING to test connectivity to the server. Ping requests are disabled on the WildFire server. Best practice to test connectivity is to Telnet to the server on port 443. To verify, if any files have been forwarded to the server, use the following command: > show wildfire status Connection info:         Wildfire cloud:                default cloud         Status:                        Idle         Best server:                  va-s1.wildfire.paloaltonetworks.com         Device registered:            yes         Service route IP address:      10.30.24.52         Signature verification:        enable         Server selection:              enable         Through a proxy:              no Forwarding info:         file size limit (MB):                  2         file idle time out (second):            90         total file forwarded:                  0         forwarding rate (per minute):          0         concurrent files:                      0 The total file forwarded counter will provide the number of files being forwarded to the server. Thanks ... View more

Hello Mike, We don't have a way of specifying a particular event (updates and/or downloads fail) for which the PANFW should forward the email notification for. As a workaround, you can create an email alert profile How to Configure Email Alerts for System Logs? for a specific severity. That way you are still sending out the email notifications, at the cost of sending extra email notifications of other SYSTEM logs as well for same severity( which by the way is a good practice) Hope this helps. Thanks ... View more

Hello Tigran, There is a possibility that one or more process on that Macbook was corrupted and it was flooding packets towards random public IP address. Did you check the utilization on that Mac before re-connect the internet..? Thanks ... View more

Could you please let me know what host it was..? As you said "disconnect and reconnect the host internet and everything works fine". Thanks ... View more

Hello Renan, That is a different option to send SYSTEM log messages (for different severity) to an email account. Reference DOC: How to Configure Email Alerts for System Logs? Hope this helps. Thanks ... View more

Not sure why, but may be for security reason. Thanks ... View more

Hello pred-martin, It would be great, if you can check with an another GP version. This is just to cross check this behavior. Did you try with "ON Demand and SSO is disabled and that password is not saved". Thanks ... View more

Re-posting my previous response: I Don't think PAN FW is having a direct option to AS-Override, causes to replace the AS number of the originating router with the AS number of the sending BGP router. Thanks ... View more