About TRisec

Hi guys, a customer gets a replacment of PA7050 for the PA5000 model they are currently using. Since the PA7k uses the blade slot as reference for the Interfaces my idea was to replace "ethernet1/1" from the PA5k config with "ethernet7/1" and load it up in the PA7k. Well, it didn't work as the Mgmt tells me that the reference is invalid. A small extract from the error message is: network -> interface -> ethernet -> ethernet7/11 ethernet7/11 is invalid. Discarding zone -> internet -> network -> layer3 'ethernet7/11' is not a valid reference If I instead configure a new interface and view the xml file, the interface is indeed named ethernet7/1 as the GUI tells me, so I'm quite confused what the problem is. Hopefully someone has an idea what to do as recreating the whole config from scratch would be nigh to impossible due to lots of VPN Tunnels. Best regards David ... View more

Hello How do the PA decide which categorie it should use, if a web site matches 2 categories. Example: I have checked "www.paloaltonetworks.com" at Brightcloud. The result, it matches "Business and Economy" and "Computer and Internet Security". So I created a special rule set to deny both categories from a specific client. Result: site blocked. Now I allow only one of thos 2 categories. Results: "Business and Economy"- Blocked and "Computer and Internet Security"- Allowed --> Site available. "Business and Economy"- Allowed and "Computer and Internet Security"- Blocked --> Site BLOCKED. Now the final question: Which are the criterias the DAN devices uses, if Bright Cloud is configured as DB and URLs should be handelt with more than one category match? Regards Ralf ... View more