About kprakash

On the other hand, You can create a custom report and filter it out based on the threat id in question. You can then apply this custom report on a report group, and then use this report group under an email scheduler. The only caveat to this solution is that you will not get live emails when the vulnerability is hit (unlike when using the log forwarding profile mentioned above ), but atleast you can get email notifications everyday about the event when the vulnerability was detected on the firewall. Does this help? BR, karthik ... View more

Hi Jim, Yes, you were right about the fact that the PANFW wouldnt check for other vulnerabilities. My Bad We dont have a way of specifying a particular threat event for which the PANFW should forward the email notification for. As a work around, you can create the log forwarding profile with the email server settings and apply it to the policy, and we will email the notifications out to the mail server. You can limit the emails that are sent out, by selecting the severity of the threat. That way you are still sending out the email notifications, at the cost of sending extra email notifications of other threats as well ( which by the way is a good practice ) BR, Karthik ... View more

Good Morning Oshcomp, You can refer to the below document that gives details about the current issues and the versions on which they will get fixed. https://live.paloaltonetworks.com/docs/DOC-1982 The release notes give us a good amount of information,but in circumstances where you need some more details, please feel free to contact your Sales Engineer, who will have a better insight to all the questions that you have with regard to the issues and their fixes. BR, Karthik RP ... View more

You have a valid point, but we do not have that feature as of today on the box. You can contact your Sales Engineer for this enhancement request and he can apply one for you on your behalf. Till then you have to work around it with the steps that I mentioned before. BR, Karthik ... View more

Hi Scourge, We do not have an option of shutting down a sub interface as its logical in nature. We could however, select "none" zone for the sub-interface or "none" virtual router or both, if you do not want traffic to ingress/egress via this sub interface. Hope this helps BR, Karthik ... View more

Hi jmayne, If you are looking for emailing just one vulnerability threat events, you can create a new vulnerability profile for that threat ID, as shown in the screen shot below Then use this profile under the security rule for which the traffic will flow through. Bear in mind that you should have a similar security policy below this rule , having a vulnerability profile that checks for the rest of the vulnerability signatures, so that you do not skip checking the other malicious traffic. Create a new log forwarding profile and select the email server that we have configured Use this log forwarding profile under the first security policy that we created Hope this helps, BR, Karthik ... View more

Good Morning Panos, You should get the same reports from the logdb that you imported from the other device. To export the logdb >scp export logdb to <value>   Destination (username@host:path_to_destination_filename) To import the logdb >scp import logdb from <value>   Source (username@host:path) Just to bear in mind that when exporting logs from a Panorama server to another Panorama, the Panorama servers must be on the same SW version to be able to import them. Doing an import will delete any existing logs and replace them with the imported logs. Hope that helps, BR, Karthik ... View more

It still applies. You can raise a feature request if you want to have it incorporated on the firewalls. L2VPN is a legacy technology, I recommend trying the Global Protect Feature. BR, Karthik RP ... View more

Good Afternoon Egearhart, The TAC is investigating  this issue. Its unfortunate that the device became unstable after the upgrade. Let me see if I am seeing a similar behavior on one of our lab systems. Was this specific to the 4020, or do you have other firewalls that reported the same issue? BR, Karthik ... View more

We cannot terminate an L2vpn or GRE on the PA. We can only pass these traffic through it BR, Karthik RP ... View more

SCP is supported to export the configurations https://live.paloaltonetworks.com/docs/DOC-1092 Does this help? BR, Karthik ... View more

Good Morning Nicolas, Is Olfeo located on the DMZ too, or is it located on another zone? From what I understand the wifi users rely on the proxy to access the web. That being the case,do the guest users' browsers have the proxy setting to forward the web traffic "get" requests to the proxy server? We do not need a PBF rule, and we can just have a security policy from LAN to DMZ ( and have interface Source NAT, if the proxy squid is not directly on the firewalls DMZ interface subnet ), so that the GET requests are routed from the wifi users to the proxy squid on DMZ. As mentioned earlier, we also require the security policy from DMZ to Internet and a NAT from DMZ to internet. Please let me know if that worked BR, Karthik ... View more