About rrajendran

Hi, Yes, the original ACK is the first ACK received. If fame 158 is the first ACK , then the window size will be calculated from it. Am not very sure about the 'type of traffic' mentioned in the article, however, it should follow the normal sliding window mechanism. However, that would be session based, that is, the packets for a particular session are expected to come within the window range calculated. Please mark helpful if yes. Regards, Ramya ... View more

Hi Nicky, We do not have any information related to CVE-2006-0225 in our database. Hence, there is no option to block it on firewall. Hope this is helpful. Regards, Ramya ... View more

Hi Dorsey, Sure. You can try re-starting the box and if that does not help, attach the PAN-GPS logs from the client for analaysis. Regards, Ramya ... View more

Hi Choff, According to me, there isn't any option for disabling DH key exchange and 512-bit suites. You can only avoid using them. However, if you have configured IPSEC VPN, you would have to use any one of the DH group while choosing your IKE proposals. Also, there is no option to disable SSLV2 AND V3, but due to issues related to CVE-2015-0204, our firewall stopped supporting SSLV3 from 6.0.8 and 6.1.2. Hope this is helpful. Regards, Ramya ... View more

There is no frequency as such for download. PAN-DB seed file is already existing on the firewall. Hence, whenever a URL category is requested, it will look into the local database. In cases where the category is unknown, the request is sent to the cloud and the information is pushed from PAN-DB cloud to the firewall. You can manually download the database file at regular intervals to have it updated. Below link might be helpful: http://researchcenter.paloaltonetworks.com/2014/10/web-security-tips-pan-db-works/ Regards, Ramya ... View more

Hi COS, I confirmed that the site " www.lavanguardia.com" is categorized as Malware. Please refer the below link on how to submit for categorization change: How to Submit a Mis-Categorized URL for PAN-DB When using PAN-DB, the database is synchronized automatically. However, if you would like to manually download, you need to click on 're-download' option under licenses. Regards, Ramya ... View more

Hi, I guess you are looking to configure permitted IP address, that would restrict only those users to access the public interface of the firewall. You can refer the below document: Allowing Specific IP Addresses to Access the Palo Alto Network Device You would have to add the permitted IP addresses in the management profile (Network ->interface management). Then call this profile in the interface (Network ->interface->advanced) settings. By doing so, you would be allowing access just to those users associated with the IP addresses. Regards, Ramya ... View more

Hi Dorsey, As it is related to SSL VPN, you can try restarting the below services: debug software restart sslmgr debug software restart sslvpn-web-server debug software restart management-server Regards, Ramya ... View more

Hi, PA firewall does consider the window scale option. It is capable of adjusting its sliding window accordingly. Only if the packets arrive out of this window range, it would drop packets considering it as 'out of order'. You can refer the below links that has more information on it: How to Set the Palo Alto Networks Firewall to Allow non-Syn First Packet Palo Alto Networks TCP Settings and Counters If it still drops, then we would have to investigate on it further. Regards, Ramya ... View more

Hi, As per my knowledge, there isn't a way to restrict just the ARP traffic. Regards, Ramya ... View more

Hi epeeler, Yes. If the vwire zones are placed in different zones (trust and untrust), then you will require policy to allow the traffic to reach your gateway from host. Regards, Ramya ... View more

Hi Alex, Yes, I have tested and it is working. However, I am not sure about Win10-Beta version. Regards, Ramya ... View more

Hi I came across similar error in 6.0.7. We followed the below steps: - Tried restarting management server (debug software restart management-server). - Deleted the content file ( " delete content update panupv2-all-contents-489-2600.tgx" ) , re-downloaded and installed it. However, the above steps did not resolve. At last we did a factory reset and that fixed the issue. Hope this would be helpful. Regards, Ramya ... View more