About bnelson

if without trust relationship between different domain you should switch to use one user-id agent install on each domain ... View more

Just to add to this, PA shipped us a PA-500 and I am successfully meeting or beating their spec sheet numbers using the exact same testing methodology we used for this thread. See http://media.paloaltonetworks.com/documents/PA500_Specsheet.pdf for the spec sheet I'm referring to. We're getting around 300 to 350 megs with no threats turned on with the PA500, and around 200-250 megs with threat profiles turned on. ... View more

Yes, Global Protect client 1.1.6 and UserID Agent 4.1.4-3 are both supported in PANOS 5.0.2. Page 13 of PANOS 5.0.0 release notes provide the minimum supported versions: User-ID Agent (AD) 3.1.0 GlobalProtect Agent 1.1 Hope this helps, Ben ... View more

I have upgraded to 6.02 and this is no longer effective for my logs... I have omitted some sensitive information, but as you can see the \n is very visible. Thoughts? * Beta Alert in Draft - some fields may not be necessary * * Version .91 -  IT Security * --------------------------------------------------------------------------- Source Machine: xxx.xxx.xxx.xxx \n ------------------ \n Source User: username \n ------------------ \n Received_Time: 2014/06/12 09:24:02 \n ------------------ \n Time_Received: 2014/06/12 09:24:02 \n ------------------ \n Severity: medium \n ------------------ \n Action Taken: reset-both \n ------------------ \n Rule: Default Web Access \n ------------------ \n To: Outside \n ------------------ \n App: web-browsing \n Threat: Microsoft ASP.NET Path Validation Security Bypass Vulnerability(30133) \n ------------------ \n Threat ID: Microsoft ASP.NET Path Validation Security Bypass Vulnerability(30133) \n Category: any \n ------------------ \n Destination Country Code: GB \n ------------------ \n Source Port: 60065 \n ------------------ \n Destination Port: 80 \n ... View more

The portal is specified by the domain name like portal.example.com on the firewall.  I will check the users client. ... View more

We use the same Identity certificate for end user devices, for ease of management. We do have detailed instructions for configuring iOS to function with Global Protect, you can download them here:  https://support.paloaltonetworks.com/index.php?option=com_pan&task=dl_tech_doc&filename=GlobalProtect-Config-Apple-iOS-RevB.pdf Ben ... View more

anyone knows how to solve this problem ? we have the same issue on a fw panos 4.1.13 ... View more

Try entering the following command: set cli terminal type putty then restart your putty session. Ben ... View more

@BPERE Sorry, this is not part of the blocking of the https web page. The blocking is still performed by the URL Filtering engine. It does allow the Palo Alto firewall to display the block page rather than a default browser error page. In the URL filtering log it will display the ip:port rather than https://www.facebook.com. Ben ... View more