About ssharma

Once you have SSL decryption configured, you can follow following documents: 1. https://live.paloaltonetworks.com/videos/1332 (Video Demonstration of Google SafeSearch Custom App ID) 2. https://live.paloaltonetworks.com/docs/DOC-1399 (How To Control Image SafeSearch for Google and Bing) You can block following app-ids from "Google-SafeSearch-Strict-4.1" : 1. google-image-search-moderate 2. google-image-search-ss-off 3. google-safesearch-set-moderate 4. google-safesearch-set-off When users go to http://google.com or https://google.com (ssl decryption required), they can search for any keyword. When they click on Images, they will get a application block response page (Device -> Response Page -> Application Block Page). You can edit this page to guide them to change the setting to SafeSearch option . Once safesearch is enabled, they can access the image search. Hope that helps. ... View more

Hi Rangiruru, Try Following : Under Monitor -> Manage Custom Report, click add. Under Database, choose URL under Detailed Logs (slower), time frame: last 24 hours, sort by top 500 and group by 50 groups. Have following query (user eq user1). See if that helps. Thanks ... View more

Hi, Run "show system resources | match srvr" and just "show system resources" 1st command should provide you with memory used by management-server and device server, check if those are high. 2nd command will give you information regarding swap memory used and also the wait time (wa x%), check if that is high If any of them is high, try restarting your management server and see if that makes any difference. Hope that helps. ... View more

Yes, you can still use "trust to untrust" policy. Whenever firewall sees an IP address that does not have mapping (user to ip mapping), that IP address's browser will be presented with Captive Portal page for authentication. Once user authenticates, they will use same NAT policy as other known user. Thanks ... View more

Comment fields are part of running config, so they will be synchronized between the devices. So it will be overwritten. Management information are not synced between the device, but this will also not help you to document information as per your requirement. Thanks ... View more

You can check both of these boxes. Checking "Dynamic url filtering" will help query for the url category that are not resolved in local database. "Log container page only" logs only the URLs that match the content type that is specified. One way to check is to do "test url <site's name>" admin@myPAN>test url google.com google.com search-engines (Base db) "Base db", means device was able to resolve the url category from the local database. If it had to query for cloud, it would show Cloud db. I hope this helps. Thanks. ... View more