About pantac

The first thing I would check is that the Interface speeds match to the device they are plugged into.  If the PAN plugs into a switch, and the interfaces on teh switch are froce to 100Mb/Full.  Make sure teh PAN is configured the same way.  If the switch interfaces are set Auto/Auto, configure the PAN the same way. Some relevant commands to run via CLI: show system statistics                  - shows total bandwidth passing through the PAN show running resource-monitor           - shows data plane CPU usgae at different time intervals show system resources                   - shows management plane CPU usage Do you have QOS enabled? What application is the PAN detecting this traffic as? On a related note, only apply url filter to outbound internet traffic. Do not apply URL filtering on your own internal servers. If you continue to have problems you should contact support. ... View more

no. this is an invalid configuration and will fail to commit (the commit process does some checking for invalid configuration settings, marks this as invalid and gives a configuration error). e.g. Logical interface ethernet1/7.2 configured with tag value 2000. No two logical intefaces can have same tag value. Logical interface ethernet1/7.5 configured with tag value 2000. No two logical intefaces can have same tag value. Configuration is invalid ... View more

Zone protection is mostly for setting traffic limits and thresholds. Syn flood: Alert threshold  =  X Packets Per Second Activate threshold = PPS Action =  Random drop or SYN Cookie ICMP flood Alert Threshod = PPS Activate threshold = PPS UDP and Other IP flood, same as ICMP flood. It also allows Port scan and IP scan thresholds to stop dropping packets after X scans in Y seconds. Zone protection does not detect coss site scripting or SQL injection or any HTTP based attacks. Steve Krall ... View more

I assume you are using a pool NAT, where multiple internal systems are NATed behind a single external NAT.  In this situation the XBOX NAT test will come back as strict.  This is normal and the XBOX should still work and users should still be able to connect and play games.  You shouldn't need the inbound ports open, because the PAN should detect the XBOX traffic and be able to handle the return traffic gracefully. You're outbound policy should allow the XBOX live application out.  In the service column you should either be using application default or any.  You might want to create a specific policy allowing XBOX application only. As a test you might try configuring a static (one-to-one) NAT for a device and see if this improves things. What game are they having trouble with? If you still have problems you should open a support case. ... View more

An Application Blocked override page is not avaialble at this time. Pleaes contact your local SE if you would like to set up a feature request. ... View more