About Abs

Abs · ‎08-13-2013

Nice. I'm not an expert at CSS, so I didn't think about that. Great workaround!

Abs · ‎03-07-2013

I usually just open up the range of vlans from 1-4094...but why do this is it's meant to be transparent?

Abs · ‎03-07-2013

As above. A.

Abs · ‎03-07-2013

If you have a third party client that requires access in to your network, you can extend the features of the firewall through VSYS without giving them access to your primary firewall system. This way that can manage policies, run reports, etc. Not necessary for all, but can be helpful. A.

Abs · ‎03-07-2013

There is a 64,000 user limit for the device itself. I have not seen a captive portal specific limit anywhere.

Abs · ‎03-07-2013

As of 5.0.2 the button cannot be modified from the word "Login" or the submit button will not work.

Abs · ‎03-07-2013

Also, I tried this on my M-100, and it worked fine. This may just be a bug on your version.

Abs · ‎03-07-2013

Also, you may want to consider upgrading your device type. There may be a trade-in promotion going on. May want to contact your SE.

Abs · ‎03-07-2013

Yes Captain.

Abs · ‎03-07-2013

Also, keep in mind that the ACC is updated once every 15 minutes.

Abs · ‎03-07-2013

Not yet. If you know, please inform us here.

Abs · ‎03-07-2013

For other protocols that Cisco uses (such as GRE, and ICMP) you'll need to use Applications. For IP, setting the service to Any is enough.

Abs · ‎03-07-2013

Just kidding. Pressed enter by accident. Spoke to Palo Alto support and they said either this week or next week.

Abs · ‎03-07-2013

It'll be here on Tuesday.

Abs · ‎03-07-2013

There is no posted list of desired features. You have to talk to your SE to place feature requests.

Abs · ‎03-07-2013

No, the default interval when empty is 600 seconds (10 minutes).

Abs · ‎03-07-2013

Device > User Identification > Group Mapping Settings > Choose the group mapping you've created. There you will see the Update Interval. Adjust to your needs. A. (Now shamelessly accepting the following 15 friend requests.)

Abs · ‎03-07-2013

Hi Bulent, When you log in to the CLI and enter the show user group-mapping-service status command, what do you see? A. (Now shamelessly accepting the next 49 friend requests.)

Abs · ‎03-07-2013

No, it's the default Palo Alto avatar.

Abs · ‎03-07-2013

Thanks, Champion Knight Amansour! A. (Now shamelessly adding the next 49 friend requests.)

Abs · ‎03-07-2013

Hi, I'm wondering, if I were to add an AD group to the Group Mapping pane on the firewall, are all the members of that group also added? Or do I -definitely- need UserID for that? Thanks, A. (Now shamelessly adding the next 49 friend requests.)

Abs · ‎03-07-2013

Hi Adam, By default, the ANY service of the firewall covers all TCP and UDP ports. No need to create a new service for this. A. (now shamelessly accepting the next 48 friend requests.)

Abs · ‎03-07-2013

Hi Bulent, Multi domain has a few items to keep in mind, and I don't think I've seen an article that talks about how to do it. Yardim gerekiyorsa, bana mesaj atabilirsiniz. Take care, A. (Now shamelessly accepting the next 50 friend requests.)

Abs · ‎03-07-2013

Hi Adam, The risk score is the entire risk score for the device...not the application, or any other filters that you apply. It appears that the time frame is the only thing that can change it, because it is an average of the number of threats during the time period you have selected. I hope that was helpful. A. (Now shamelessly accepting the next 51 friend requests.)

Abs · ‎03-07-2013

You may want to check out this thread below for helpful answers. As always, searching before posting reduces clutter on forums. What is the reason for packet capture? A. (Now shamelessly accepting the next 51 friend requests.)

Abs · ‎03-07-2013

Hi all, I've been trying to wrap my head around how to use the XML-API, and if anyone has any good resources on how to learn this, I'd really appreciate it. Thanks, A. (Now shamelessly accepting the next 54 friend requests.)

Abs · ‎03-07-2013

I was informed that 5.0.3 would be released either this week, or next week at the latest! A. (Now shamelessly accepting the next 54 friend requests.)

Abs · ‎03-07-2013

If you do the field upgrade on the 500 it should help. Other platforms do not have this issue, that is greater than a PA500.

Abs · ‎03-07-2013

WildFire logs will still have the files analyzed against up to date information from the cloud, the subcription is to get those updates every 15 minutes and not over 24 hours. File rules establish the action for each EXE/PE file downloaded.

Abs · ‎03-07-2013

There are only 3 HA interfaces. For Active-Active the design must accomodate steering of traffic to the new device from the network, not the firewall. The sessions will not be synchronized over the Gigabit connection provided for synchronization. The firewall can only handle the traffic it is given, anymore and it will drop packets.

Date Registered	‎03-20-2012 09:56 AM
Date Last Visited	‎08-18-2015 09:07 AM
Total Messages Posted	61
Total Likes Received	28

Online Status	Offline
Date Last Visited	‎08-18-2015 09:07 AM

Strata

Prisma

Cortex

About Abs