About Ovan

When I configured authentication on  PaloAlto I met the problem: I tested authentication on  PaloAlto: - 1 Domain Server: installed PAN Agent - 2 pc join  domain - Create some accounts: user1,  user2, user3 1> I logon with domain user  (user1), I can access Internet and in Monitor Tab I can see my pc had been  authenticated (user_domain.png) 2> I logout and login again with  local user (cloud), I still can access Internet (user_Local.png) although I set  policy deny all except user1, user2 (policy.png) 3> If I changed IP Address from  172.16.1.71 to 172.16.1.76, I couldn’t access Internet but If I changed IP  Address to 172.16.1.71, I still access Internet. -       I want only domain user can access  Internet but local user, PaloAlto can do or not? -       I think PaloAlto cached the IP  Address to define Account Domain so when I logon with local user with old IP  Address, I still access Internet. If I right, how long PaloAlto will clear  cache? Can I change the time to clear? -       I used PC1 to access Internet with  user1 but I still could  used PC2 to access Internet with user1. PC1 and PC2  could access Internet in the same time with the same user. Can I configure  PaloAlto allow only one user to access Internet? ... View more

Hi all, I had tested manage users via AD and Radius, now If I want to manage users via PC's hostname, can I? PC's hostname is the name of PC in domain, ex: pc1.testlabvss.com. ... View more

Dear PaloAlto Support, Does Palo Alto support this VPN feature such as  Dynamic VPN or Easy VPN? Customer will use  Cisco Router at their branches. They want to connect VPN from all  branches to their HQ. All branches will have dynamic IP and HQ will have static  IP. Thanks, ... View more