About emr_1

emr_1 · ‎08-20-2013

Hi achitwadgi, I see. It helps me to understand more clearly. Thanks for the updates.

emr_1 · ‎08-20-2013

Hi, That is expected result and normal. Please refer to following KB: ACC Shows Different Results After Clearing Filters Regards

emr_1 · ‎08-20-2013

Thank you for your replies, guys. I tested with my PA device. As VinceM says, I confirmed PA did not upload the APK file at this point. I think this is new feature available from 6.0.

emr_1 · ‎08-19-2013

I found following new press release: Palo Alto Networks WildFire Protects Against Cyber Threats Targeting Android Smartphones and Tablets I have PaloAlto device with Wildfire subscription. The device is running on PANOS 5.0.6. How can I use this new wildfire? Does it mean I just change configuration of File Blocking to upload .apk files? If someone knows, please help. Otherwise, I'll contact to my local SE. Regards, Emr

emr_1 · ‎07-23-2013

I don't know there is any document related to this filter, but I found this filter from PaloAlto API browser and debug for web browser. You can access to API browser by typing in https://<IP address for MGT>/api/ For debug, you can access to https://<IP address for MGT>/debug Regards,

emr_1 · ‎07-22-2013

Hello, Please use following filter in security rule page (on GUI). (log-start eq 'yes') You can change log storage allocation under device tab > setup > management tab > logging and reporting settings please click edit button on the right upper corner. Regards,

emr_1 · ‎07-19-2013

That's as expected. You need GP-Gateway license for Android and iOS. You can find license information in following document. (page 3) Regards,

emr_1 · ‎07-17-2013

I found following article. Sucuri Research This is pretty interesting technique, though if people hits this kind of malware, is Threat Prevention (or might be wildfire?) able to detect this malware? Regards,

emr_1 · ‎07-08-2013

How about zone level? You can configure it under zone protection configuration. Regards

emr_1 · ‎06-26-2013

Hi Thank you for your reply. I could generate client cert and successfully auth'ed by client certificate. I have one more question. I generated two certs, and confirmed both certs works fine. Afterward, I revoked one cert, though I can still login to GP Portal using user002. Doesn't it revoke just after I hit 'revoke' from GUI? (I mean do I need to wait few minutes? hours?) Do you have any idea? Regards

emr_1 · ‎06-26-2013

I made 5 users into LocalDB, and I configured GlobalProtect Portal & Gateway. It works fine so far. Now I want to generate 5 client certificates for each user and use Client Cert Profile and Local DB as two factor auth. when I connect to GP. My PANOS is 5.0. Is it possible to publish client certs? I could confirm I can configure CA under Device tab > Certificate Management > Certificates. But I think I CANNOT generate client certs using this CA. If I'm wrong, please correct me and tell me how to. If I'm correct, I'll prepare Windows 2008 or 2012 server for CA and client certs. Regards, Emr

emr_1 · ‎06-20-2013

I found one command that might help you...I hope. try 'set application dump on rule <rulename> protocol 17 destination-port 53' you can see green down arrow besides each traffic log after you enter this command I just mention that if I enter 'set application dump on rule <rulename>', my PAN device somehow collected pcaps for all traffics. I think only rulename does not work properly. ***Additional Comments*** I confirmed that rulename filter does not work even I specify protocol number and destination number. This command would not help you. I apologize for it.

emr_1 · ‎06-19-2013

I think there is no way to specify security rule for packet capturing. Can you use 'test security-policy-match ...' command instead?

emr_1 · ‎06-12-2013

Hi I found following two addressed issue from 4.1.13 release note. Does these two sound similar to your issue? 51225—When an interface was configured with hard-coded options, such as setting the duplex to full instead of auto, the interface did not come back up after a reboot. The same interface worked fine after setting it to auto negotiate. This occurred on a PA-2020 firewall and was due to an issue where the interrupts were not being properly cleared on the interfaces. 49986—The link speed and duplex settings for the dedicated HA interface on the firewall were defaulting to auto-negotiate although configured to use a specific speed and duplex value. With this fix, the dedicated HA interfaces now maintain the link speed and duplex settings defined for the interfaces. Regards, Emr

emr_1 · ‎06-07-2013

I add information to panos's reply. If you need to use internal gateway, you need GP Portal license. Reference:

Member Since	‎05-10-2010 06:49 PM
Date Last Visited	‎02-01-2026 04:22 PM
Posts	385
Total Likes Received	136

Online Status	Offline
Date Last Visited	‎02-01-2026 04:22 PM

About emr_1

Re: PAN-OS 11.1.13 Predefined reports displaying IPv4 addresses in IPv6 format

Re: Does User ID Agent 10.2.4 compatible with PAN OS 11.1.13?

Re: Max number of units (aeX.Y subinterfaces) supported under a single AE interface?

Re: Windows-Remote-Management & Implicit Use of Web-Browsing

Re: Identifying Preferred/Recommended PAN-OS Versions

Re: When will the Legacy URL Filtering license be transitioned to the A-URL license?

Re: How To Use Expedition

Re: Cloud NGFW Credits issue

Is there anyway to translate e-learning contents in Learning Center?

Re: versions 10.2, 11.1, 11.2 - which is best?

Re: Does User ID Agent 10.2.4 compatible with PAN OS 11.1.13?

Re: Windows-Remote-Management & Implicit Use of Web-Browsing

Re: Identifying Preferred/Recommended PAN-OS Versions

Re: versions 10.2, 11.1, 11.2 - which is best?

Re: PA-VM LAB licensing

Re: TID 95187 is not on my signature list

Re: what does "SWITCH" in hardware architecture mean?

Re: any solution to keep tracking user IP mapping?

Re: any solution to keep tracking user IP mapping?

Re: [need help]can't see new incoming logs after upgrading M-100 into 8.1.12

Nominated Discussion: What does "SWITCH" in hardware architecture mean?

Nominated Discussion: How to Change Forward Decrypt Trust Certificate

Re: How to use Wildfire for Android APK

Re: acc top source destination

Re: How to use Wildfire for Android APK

How to use Wildfire for Android APK

Re: Policy with "Log at Session Start" option - how to find it?

Re: Policy with "Log at Session Start" option - how to find it?

Re: Licence problem with Iphone/Android GlobalProtect client

Can PAN detect this kind of malware?

Re: permitting/denying asymetric TCP flows at the VYSY level?

Re: Can PAN device publish client certificates?

Can PAN device publish client certificates?

Re: Packet capture of specific Security Rule?

Re: Packet capture of specific Security Rule?

Re: HA PORT CONFIGURATION IN 4.1.12?

Re: GP with Host detetion and auto-connect

Nebula Beta

Unlock your full community experience!

About emr_1