About franck.lichnowski

Hi, I tried it, but i didn't see any package to delete, when I tried with auto-completion there is no "nameOFthreadfile" to delete :smileyconfused: I want to delete this package because i'm in Active/passive configuration. ... View more

Yes I see the package on the webgui. ... View more

No, it didn't match other rule. When OpenVpn is set on port 443/udp (rule port is set on 443 too) openvpn is recognize as "unknown-udp". i will open a case. Franck. ... View more

Thanks for the reply. No I disable tcp_drop_out_of_wnd because some http (only http, not in ftp) download break. This is totally random, ticket is open on PaloAlto support since 1 month. Maybe it's because (I think, Palo Alto don't give any solution or suggestion) I have a special network architecture :             Internet                  |             Vsys 1              /   |    \            /     |     \          /       |      \   Vsys2  Vsys3  Vsys4 I think intervsys routing don't like tcp_drop_out_of_wnd check. ... View more

omg, the problem came from another network switch (Extreme Networks X650) in head of PA 4020. The problem is come form this rule : enable ip-security anomaly-protection tcp flags Thanks for all replies. Active now works with : application : ftp service : application default Regards, Franck. ... View more

Hi Parth, thanks for the reply. NAT is not active. All my IP are publics, no internal private IP. My rules is like this : Security Rule : ftp-in Source Zone:-  untrust (Outside zone) Source Address:- any     Destination Zone:- DR-LAN  (inside zone) Destination Address:  194.57.xxx.xxx (Public Ip of FTP Sever) Application: FTP (application default) Action:- Allow With this only passive connexion works. Active not. I don't know why. I 'am on PANoS 4.0.10 I log all connexions, I never see any connexion in active : my server from port 20 to client (1024 - 65535). With my old networks infrastructure (extreme networks) active works fine, so my server's configuration is fine. May be it's because I let application ftp (service) with default ports (21) ?? May be I must set service on "any" ? Regards. ... View more