About manaschai

Hello every one .      I try to implement PA-500 on PAN-OS 4.1.6. Then I configure 2 security policies.     1. security policy for deny bittorrent from both direction (Trust and Untrust zone) .     2. security policy for allow all traffic both direction but enable AntiVirus, Spyware, Vulnerability and URL filtering on alert. My environment for implement is                                                           Brance ======= 40 MB ======= Data Center Client == Switch ==Palo alto == Router == MPLS VPN COULD == Router == Switch==ACCPAC server    Then I try to test use applications found ACCPAC software (accounting software) slowly. After that I check by install bandwidth monitoring software and found the bandwidth behind PA-500 (14 Mbps) differrent in front of PA-500 (26 Mbps) about 12 Mbps at file size 146 MB.      I check firewall troughput by command it shown about 30 Mbps.      After that I try to disable AntiVirus, Spyware, Vulnerability and URL filtering (for disable threat prevention). Then test use ACCPAC again but result same before disable treat prevention .      Then I try to use FTP application upload and down file to same server. I found behind PA-500 down/up speed 20 Mbps and in front of PA-500 down/up speed 39 Mbps.      Note: The client machine run on Window XP operating system.      Why traffic different between behind and in front of PA-500 in case traffic not over throughput spec?      How to fix this problem or other solution for fix it.  Manaschai S. ... View more

Hello      I try PAN-OS 4.1.3, I use captive portal authentication with Radius/AD. I config user in WiFi zone access to any zone must authentication with captive portal. It work normally. But I try set Proxy server and user in WiFi Zone config Proxy IP into Internet Option. After that the user in WiFi zone can't access to any web becasue of the broswer doesn't redirect to captive portal authentication. Then I try to remove Proxy IP from Internet  Option and test access web site. It redirect to captive portal page for authentication. Then I set Proxy IP into  Internet Option. It can access to website pass through Proxy server normally.      Why I remove Proxy IP from Internet Option before authentication with captive portal?      How to config for this issue ? ... View more

Hi everyone,      I use PAN-OS 3.1.6, I want to customize url report by filter some website don't show in my customize url report. I try use filter by url and operation is "!=" but it doesn't work. How I do it ? ... View more