About ssharma

Hi @mcocat, You can configure SNMP under Objects -> Log Forwarding. Then use this log forwarding on all security policy that you want get alerts from. Under Policies - > Security -> Action -> Log Forwarding Hope this helps. Thank you. ... View more

Hi jambulo , The unused rule counter is based off the dataplane since the last restart. That means once the device is up and running and one of the rule is never triggered, then that is considered unused rule. Currently there is no way to generate a custom report based on that as it will never generate any report. You can view it on security policy only. Hope this helps. Thank you. ... View more

Hi Slv, Yes that is expected icon of the detailed threat logs : In order for you to see the report in expected column, you can configure "Selected Columns" under Custom Report for "ataki na serwery", you can have Threat Name, Action, Application and so on.., commit the changes and look for the next report. This should resolve the issue. Hope this helps. Thank you. ... View more

Yes there are few traps available : panROUTINGRoutedBGPPeerEnterEstablishedTrap NOTIFICATION-TYPE     OBJECTS {   panReceiveTime, panSerial, panEventType, panEventSubType, panVsys, panSeqno, panActionflags, panSystemEventId, panSystemObject, panSystemModule, panSystemSeverity, panSystemDescription   }   STATUS current   DESCRIPTION     "BGP peer session enters established state."   ::={panCommonEventEventsV2 1531}   panROUTINGRoutedBGPPeerLeftEstablishedTrap NOTIFICATION-TYPE     OBJECTS {   panReceiveTime, panSerial, panEventType, panEventSubType, panVsys, panSeqno, panActionflags, panSystemEventId, panSystemObject, panSystemModule, panSystemSeverity, panSystemDescription   }   STATUS current   DESCRIPTION     "BGP peer session left established state."   ::={panCommonEventEventsV2 1532} You can look at following MIB file for detailed information : https://live.paloaltonetworks.com/docs/DOC-6587 Hope this helps. Thank you. ... View more

@tstores, You can monitor BGP on Palo Alto device at following location : You can click on More Runtime Stats and navigate around available option. You can also look under Monitor -> System log and look for BGP events. Thank you. ... View more

Hi BigIr0n , Yes that is correct, if you don't specify any vlans that means (0-4094), that everything is that is coming off of 1 vwire interface  will exit out other interface. If you want do it based off of specific vlan, you can configure that as well. There are no issues with this configuration. Hope this helps. Thank you. ... View more

Please find following document : https://live.paloaltonetworks.com/docs/DOC-1412 Hope this helps. Thank you. ... View more

Hi Sib, This happens when users are trying to access blocked site over HTTPS. With ssl connection firewall cannot inject response page (blocked page), and since the connection is blocked by the firewall, end users get "Web page not available" option. You can either enable ssl decryption or just configure response page as mentioned in above document. In either case, you will need to install root certificate in all machine in order to not get the browser error. Hope this helps. Thank you. ... View more

Hi @gafrol, For such cases I would suggest opening support case, so we can look at individual instance to see why it took more time than usual for signature distribution. If there is an issue, it will help us to fix the issue in future as well. If it was expected, then we can inform you with the reason. Hope this helps. Thank you. ... View more

Hi @gafrol, Sometimes when you see file marked as malicious in wildfire and even after 15-30 minutes if you are able to download the file, one of the reason it might be due to signature generated off the file in question. This might be deemed false positive and would not be added to distributed signature list. Where as wildifire still categorized as malicious. You can dispute the verdict via wildfire or open a support case for further analysis. Hope this helps. Thank you. ... View more

Timeout configuration on the above mentioned snapshot. And SSO under following : Hope this helps. Thank you. ... View more

Timeout configuration. ... View more