About djbisbey

Hello all,    How did PA support solve this problem? Thanks ... View more

I agree, Please don't go the Java route! ... View more

Let's see if I can be more specific in regard to DJ's question.  We recently installed a PA2050 HA pair with PAN OS 4.0.2.  The response times when querying data under any of the tabs is painfully slow.  I've switched browswers from IE to Chrome and that has helped a little.  Are the delays we're experiencing a function of the browser, Java, or performance issues on the backend? One of the consultants we work with commented that he noticed a significant difference in management portal performance between the 3.x and 4.0.1 consoles, but that he'd been informed that Palo Alto was aware of this and the issue would be addressed in 4.0.3. Is that just rumor, or are his comments accurate? ... View more

To my knowledge, we have not heard any customers call in to PA Support for issues related to CP upon an upgrade to 3.1.7. This might be isolated to your setup and I too would suggest calling into PA Support for further root cause analysis. -Renato ... View more

Will do. ... View more

Awesome.. the more I play with this product the more it blows me away... :smileylaugh: ... View more

One thing I would like to add in case people do not know. If you want to extract the native Windows installer from the gateway, you can do the following: Use any browser to type the following URL in your browser: https:// <ssl-vpn-gateway-ip>/ssl-vpn/jnlp/PanInstaller_x64.jar (save the file) and https:// <ssl-vpn-gateway-ip>/ssl-vpn/jnlp/PanSetup_x64.jar (save the file) Use "jar" program (from any JDK installation bin directory) to extract the content jar xvf PanInstaller_x64.jar jar xvf PanSetup_x64.jar You should get two native MSI packages that you can use to install without Java/browser. You do need Java to run the program, but at least the installation can be done without going through the browser. Hope this helps = Siu-Wang Leung ... View more

Hi, After going to version 4.3 and coincidentally changing our ISP seem to have brought on an avalanche of "not-resolved" errors. I note though that there is a mention of a 5 second response time requirement from Brightcloud before this verdict is delivered. Hmmm... I have made requests in the past to Brightcloud for URL re-categorisation and have received decent responses. However I agree that Brightcloud is not proactive ( not quick enough in this regard) in it's categorisation work. We had to send a whole list of IP addresses that microsoft (and yahoo) use to host their skydrive files so that students could download their work. I find that when MS / Yahoo add to this pool we had to keep sending these to Brightcloud. I have seen other more obvious ones not being categorised properly as well. We use custom URL categories to get over this. We have set up categories such as universal allow / deny , staff allow / deny and students allow / deny. These are then tied to policies that filter pages for these user types. Nalin. ... View more

Hi, good idea, but that really doesn't fit what I want, I have a rule to block 'unknown' users, I just wanted to use the monitor to see when they were on or attempting to be on. So anyone else with ideas would be great. Darren ... View more