About shasnain

Yes, SSL should be in the list too. Thanks, Syed Hasnain ... View more

Hi Guys, For what we have learned so far through cases are that the following apps are being mis-classified as Tor: Cisco vpn Imap Roku Radius Citrix apps Please revert back to last content version. We are in the process of pulling the content version from the update server until we fix this problem. Thanks, Syed Hasnain ... View more

Hi, Please make sure customer local agent is only doing a user to ip mapping for its local DC subnet. It should not be doing a mapping of the remote DC subnet. So if your agent is reading secuirty logs from one DC only  and you have muliple agents reading secuity logs from multiple DC, then you configure those agent on the pan and the PAN would read the user to ip mapping from all the agents. Please do keep in mind that Communication between the DC and the Agent over the WAN is a bit chatty. Thats why make sure  local agent only doing user to ip mapping for its local DC subnet and not be doing a mapping of the remote DC subnet. Thanks, Syed Hasnain ... View more

Hi, Have you tried increasing the user Identification time out on the User ID agent. The main issue here is the Agent not the PAN. Try increasing the time out to 120 minutes and dis able the netbios probing and only enabling the WMI probing. Thanks, Syed Hasnain ... View more

Hi, The following link might help you. https://live.paloaltonetworks.com/docs/DOC-1658 Thanks, Syed Hasnain ... View more

what port are you using on the agent to connect to the PAN. Try using a port above 10000 and see if that makes any difference. Thanks, Syed Hasnain ... View more

Hi, The new UID agent is very good. You can have one UID agent pull information from mulitple domains as well. Generally you can use one UID agent and connect multiple Domain controllers to it and do user to ip mapping and it should be no problem for the agent. If you feel that you need to install more than one UID agent for more resposive by deploying more agents to multiple places for specific servers and Domain Controllers you can do that as well. Thanks, Syed Hasnain ... View more

Hi, The commit generally depends how big  your configuration is. I would not feel comfortable asking you to upgrade if you have no issues on 3.1.10. Looking at your show system resources your management server and dev server seems to be healthy too. Thanks, Syed Hasnain ... View more

Hello, I have got customers using the 4.0.5 version and have complained about the Memorly leak and High CPU on DP. I have requested them to go over to 4.0.7 and since then I have not heard back from them with any issues with the 4.0.7 Version. It is a very stable and strong version and I would Highy recommend you to go with 4.0.7. Thanks. ... View more