About Hithead

Hithead · ‎08-18-2014

but since when? And we talking about google translate (ok, maybe google earth is also effected). I think, it happens after a content update.

Hithead · ‎08-18-2014

SSL decryption was always on. also for google...

Hithead · ‎08-15-2014

Hi, some users reported they are unable to use Google-Translate any more. I saw in the logs, Clients are trying to download GZIP files with the app google-translate-auto and google-translate-manual: I'm sure, the users were able to use Google-Translate in past. So the problem is since recently.

Hithead · ‎08-13-2014

Hi, created a custom signature to block uploading edrawing files (Solidworks: .easm and . edrw), but I cannot define client2server or server2client. I like to block only uploads but PA is blocking both... could you please take a look? both (NOT one of them) pattern of this file type should match: Our profile (add the custom object as exception): Thx in advance!

Hithead · ‎08-12-2014

Hi John, please take a look : https://live.paloaltonetworks.com/docs/DOC-6606 https://live.paloaltonetworks.com/docs/DOC-4159 https://live.paloaltonetworks.com/docs/DOC-4170 May these documents will help.

Hithead · ‎08-12-2014

Hi, created a custom signature, but I cannot define client2server or server2client. I like to block only uploads but PA is blocking both... could you please take a look? both (NOT one of them) pattern of this file type should match: Our profile (add the custom object as exception): Thx in advance!

Hithead · ‎08-11-2014

I have so many policies, zones etc. For example the internet has so many of custom signatures. So how I have to detect them? Also I like to see all data traffic in the Data Filtering Monitoring tab... BTW: Could someone help me to create the custom signature for the both file types written in the first post?

Hithead · ‎08-11-2014

Hi, this means, if we are transfer 'PA unknown' file types, we will never be able to log and recognize it?...sad.

Hithead · ‎08-08-2014

Hi all, we like to block or be alert when the file types .edrw and .easm (eDrawing) are passing the PA. Currently nothing is shown in the Monitoring Data Filtering. Any idea how to get PAN to update file types in security profiles? Can I somehow report it to PAN?

Hithead · ‎07-16-2014

you can use any syslog server/service you want. enable on each policy the log forwarding to the syslog service and modify also the Log Settings to the syslog server. we are using arcsight as syslog endpoint, because we creating some special reports and analyses.

Hithead · ‎07-15-2014

hello, tried VMotion and it seems to work. The licenses are still valid, also when you restart the VM on another host. But for PAN-Support we bounded it to the original ESXi Host. thx

Hithead · ‎07-14-2014

hshah, The license key is bonded to the CPUID and UUID...(if I want to register a new VM, both values are required)...Anyway, I will check the days if VMotion works or not. Just to be double sure.

Hithead · ‎07-11-2014

Hi Steven Puluka thanks. I will check it and take a look. Also I like to restart the VM at another host. Just to be sure.

Hithead · ‎07-10-2014

Hi PA-Admins, we installed a VM-100 (version 6.0.2) in our ESXi environment. By accident we forgot to disable vmotion for the VM and the VM moves from one host to others... I thought vmotion is not supported but our VM-100 is still running and the licenses are valid. from the Virtualization_Admin_Guide_6.0: System Requirements and Limitations This section lists requirements and limitations for the VM-Series firewall on VMware vSphere Hypervisor (ESXi)..... .... -vMotion of the firewall is not supported from the VM-Series_Deploymnt-RevA The authcode is tied to the Universally Unique ID (UUID). If the firewall is cloned, the UUID will change and the license will become invalid. Moving the firewall from one host to another will not change the UUID (only the CPUID) and therefore the license will remain valid. So what is now truth?

Hithead · ‎07-08-2014

I liked and marked your answer as correct, because that's truth! We had now several problems with this series and that's a never ending story. In this case, PA recommended to replace the HDD (on all PAs) and complete Hardware (2 of them) - nothing solved the problem. @all PA2000 series clients: Don't give up!

Member Since	‎09-19-2012 05:12 AM
Date Last Visited	‎09-26-2024 02:14 AM
Posts	242
Total Likes Received	40

Online Status	Offline
Date Last Visited	‎09-26-2024 02:14 AM

About Hithead

Re: User-ID suddenly stops recognizing Users

Re: URL Filter doesn't work in Deny rule

Re: How to Disable Global protect from trying to connect every time the workstation is started

Re: Global Protect - Traffic interrupted while still showing connected

Re: Can't contact LDAP server/connect error

Re: Antivirus reset-both action for mail protocols

Re: Blocking extensions using data filtering

Re: Ultrasurf again - still getting through, how to block?

Re: PANGP virtual ethernet adapter missing on windows 7

Re: How to create and configure 100 tagged subinterfaces via CLI

Question about threat logs - Type wildfire-virus

Re: Disable SSL - IPSEC only

Disable SSL - IPSEC only

Re: Disable SSL - IPSEC only

Re: Antivirus reset-both action for mail protocols

Enable Access to Office 365 with MineMeld [Updated]

GoToMeeting no longer working, http-proxy blocked

New Global Protect 3.0 is not good enough

Re: Antivirus reset-both action for mail protocols

Re: What is still missing or needs to be improved in PA Next Generation Firewalls ?

Re: GZIP File - Google Translate

Re: GZIP File - Google Translate

GZIP File - Google Translate

Custom signature - file upload blocking

Re: Needing all help possible to upgrade our lab from PA-500 to VM-100s

Re: Unknown File Types

Re: Unknow File Types

Re: Unknow File Types

Unknown File Types

Re: Alternatives to Panorama for log collecting?

Re: VMotion on ESXi

Re: VMotion on ESXi

Re: VMotion on ESXi

VMotion on ESXi

Re: PANOS 6 and PA2000 series

Unlock your full community experience!

About Hithead