About pantac

when you are configuring the policies on panorama you will see a colum for target. This is which devices will be pushed that specific rule. you can use this function to push the policies to x number of devices thus you would not have to create a rule for each group of devices. ... View more

I would check both devices to see if they have licenses for the features. But since you said you have already did this and you still get that error. I would recommending calling into support to see why it is still complaining about the licenses being invalid. ... View more

Hello, If the management server service is having issues we (support) will need to get console access to this device to determine root cause. Please open a case with us. Regards, Gary S. ... View more

Hi Assuming this was working at one point I will rule out checking the security policies for a valid log forwarding profile. If Panorama is running a compatible software version with the PAN device then you may need to have support take a look at your Panorama device. Regards, Gary S. ... View more

Hi, Yes, currently the only way to duplicate policies without Panorama would be to use an xml editor and copy the rule set from your running config xml. Regards, Gary S ... View more

The document is still accurate but there have been some enhancements introduced in 3.1. Information can be found at the links below: 'eDirectory and LDAP Authentication with PANOS https://live.paloaltonetworks.com/docs/DOC-1445 'User Identification with WMI' https://live.paloaltonetworks.com/docs/DOC-1483 ... View more

Jeff, From the many articles I have read on this, the attack on Google was a classic case of an advanced persistent threat in which an unknown vulnerability in IE6 was used to give the attackers access to the users Gmail account.  So there is a bit of exageration on the websense side. Now on to the question. Yes, our DB does have "known malware sites" category that you can block. Using the threat prevention capabilities, you can then apply threat prevention to the allowed web traffic. Relative to the specific dynamic threat feature, we can arrange for a call with prod mgmt if you think it is warranted. Matt ... View more

Currently there is not a way to configure an email log destination profile to send email on a different port other than port 25. ... View more

RPS, I will look into this issue on the support side. If you have an active support contract can you send an email to support@paloaltonetworks.com and include the following information: Pan device serial number PanOS version installed Content database installed I will open a case to investigate. Thank you. ... View more

The PAN device will correlate the user information learned from the TS-Agent and the group information learned from the Pan-Agent. This is important if you are applying domain-group based security policies. Regarding the second part of the question, yes the TS-Agent adds and removes users as they log in and off from the terminal server. You can issue the command below 'show ts-agent user-IDs' to display a listing of the corrently logged in users learned from the TS-Agent. To view the status of the configured TS-Agents and the currently logged in users learned from the TS-Agent, the following commands can be used to display the information: Display the current connection status of the TS-Agent admin@PAN>show ts-agent statistics Display the list of currently logged in users learned from the TS-Agent admin@PAN>show ts-agent user-IDs ... View more

hello Frank, currently we do not have such a document as this, but this a great idea. I am currently pursuing the possibilities of producing such a document. This document would need to be live as we are continually updating application signatures with each content release. Also a case has been created for this issue for tracking. It is case 7836. You can call into support and refer to it to get updates. Thank you, Stephen ... View more