About migration

I have recenlt purchased a PA-500, waiting for it's delivery and have yet to set one up in anything other than vwire mode. Our wireless has two SSIDs.  Each SSID has it's own vlan and DHCP server.  Problem is the students have become wise enough to switch to the guest SSID.  When they swicth to the guest their IP goes from 10.1.x.x to 10.64.x.x.  10.64.x.x. has no access to the DCs.  My guess is that the PA will lose track of the User ID because of the IP address change. One option I have is to set the guest wireless to use our internal DHCP/DNS and the same vlan.  The wireless controller (ruckus) separates the guest traffic from the internal network via ACL controls (other than DNS and DHCP) so that the only IP the "guests" can see is the gateway.  Point being that even if the students switch to the guest network their IP address should stay the same even though their traffic is completely segmented from the DCs/Exchange/etc. Question is:  Will the UserID work as long as the Users IP address does not change even though the users computer can not get to the internal network? Thanks Bob PS Students are using OS/X laptops. ... View more

I realize that is a difficult question to answer.  What kind of maximum throughputs are people seeing with their PA-500s? For example: I monitor our firewall (not a PA) using PRTG via SNMP and see a fairly constant 20 Mbps with some 30-45 minute spikes up to 35 Mbps.  Nights I see 30+ constantly (we are a boarding school and their is a lot of streaming).  Well under the PA-500 stats, but I want to have some room for growth. Thanks, Bob ... View more

Hi,    We recently purchased two PAN 5020 Firewalls. I had two easy questions.  We were wondering if they support OSPF multipath path (either equal cost or unequal cost). I was also wondering if I can configure muliple Floating IP address in the L2 mode? Does it matter if I'm in Active Active or Active Passive? Thank you ... View more

We recently upgraded our appliance to 4.1.3, and now cannot retrieve any data prior to the OS upgrade when running User Activity Reports.  My logdb shows that we are near full capacity (but haven't reached the 80% threshold as of yet); however can only pull data from the last reboot of the device - post OS upgrade.  If I run a report from the Reports option (clicking on the calendar method), then I can see activity from the general population prior to the OS upgrade. I do not have any core files, and do not have any corrupted packets from running the following commands: debug log receiver statistics debug software restart log-receiver In addition, the Monitor > Traffic Log is blank from the last reboot, so makes sense as to why the User Activity Report is blank.  My understanding that upgrading the OS should not wipe out the traffic log, which is the case for our organization; however why would my currently logdb be nearly full, and thus having the ability to run a report from the Reports option passed the time when the OS was upgraded? Cheers! ... View more

Hi, We're planning to use the Palo URL filtering features to replace Websense. Just wondering if it was possible within Palo to do any kind of URL filtering time-quotas? For example, a user might be able to look at 'shopping' category sites for 60 minutes or so before receiving a block message? Cheers, Rich ... View more

HI guys I am trying to create a custom App-ID to identify Youtube in the context of facebook, I would like to use this for a possible App QoS. Dependency is youtube from facebook but defining youtube app in the context http-host-header is too complex, so I was thinking of using youtube app as dependency and look for triggers as facebook referrer.... Any ideas? ... View more