About emr_1

Hello, Continue action only works with browser-based traffic, and some of the traffic does not allow you to click continue button. Hence you have to make either : (1)new security rule with forward only action just for the traffics you can't use continue-and-forward (2)just change current fileblocking profile with action 'forward' Regards, ... View more

The following logs are output of debug related to the operation which read-only superuser is trying to view the report. (NOTE: this is in v5.0.3) <request cmd="op" complete="/operations/download/report/predefined/scope/entry[@name='shared']/report-name/entry[@name='top-url-categories']/file-name" cookie="0890887635970713"/> <response status="error"><msg><line>Not authorized for scope shared</line></msg></response> It looks like you have no permission. Because you can't select read-only rights in admin role editor for each report, I might able to guess two thoughts. One is that this result is expected behavior and better result should be not showing report name as 'disable' rights does, another is a bug. For workaround, I agree with jfitz-gerald, you should use admin role with 'enable' rights for reports. Regards, ... View more

Hi, You can edit File Blocking Profile under Objects tab, it's not AV or AS profiles. You can specify application to apply File Blocking in Profile. OR You can completely separate security rule that currently blocking exchange server traffic. New security rule is just for mail traffic with no File Blocking Profile on it. Regards, ... View more

If you permit to save it and client users are able to save their ID/PW, it will be save in client device. You can decide it under Network tab > Global Protect Portal > <config name> > Agent tab > Use can save password. This configuration is enabled by default. Regards, ... View more

Hi, 'forward' actually does not forwarding anything and allows traffic. Following flow chart might help your understanding. Additionally, if you see 'wildfire-upload-success' or 'wildfire-upload-skip', the device upload files and the traffic will be passed. After retrieving wildfire signature, you can block same file by configuring as 'block' in antivirus profile. Regards, ... View more

Hi, I see same result as you saw. I tried 'neq', 'ne', '!=', '<>', though nothing worked. From the output of GUI debug, I guess GUI does not have criteria for negate query. Here is an example: <request cmd="op" cookie="3832618156237601" target-vsys="vsys1">   <operations xml="yes">     <deep-search>       <address>(from/member neq 'L3-Trust1')</address>     </deep-search>   </operations> </request> <response status="error" code="17"><msg><line><![CDATA[deep-search -> address Invalid input]]></line></msg></response> Regards, ... View more

Hi If you want to filter rules which enables anti-virus profile, named 'default', you can use following filter (profile-setting/profiles/virus eq 'default') Does it help you? Regards, ... View more

Hi, To refresh manually following cmd might be helpful. >request system fqdn refresh or >request system fqdn refresh force yes Regards, ... View more

Oh, really? I'm able to see them as my screenshot. Is this depends on my account privilege or something related to? Regards, ... View more

Hi Does following article answer to your question? https://live.paloaltonetworks.com/docs/DOC-3947 By default, a Palo Alto Networks firewall will not block multicast traffic when configured in Layer-2 Mode. Regards, Emr ... View more

Hi Parth, I confirmed it works on my PA-200 v5.0.0. I was trying on PA-200 v4.1.9 before and did not work. Thanks a lot. Regard, Emr ... View more