About harshanatarajan

One more thing to add, the SSO GP tile will not be active until the user  logs in to windows the first time, this is default behavior as the tile can only be bound once logged on. ... View more

WIN 8.1 no longer forces SSO info. In Windows 8.x, Microsoft changes the login model to become user centric. That means any user has the right to select which authentication method (tile under "sign in options" during log in) to use to authenticate to Windows. When logging in, you can actually select the global protect tile under the sign in options as shown below and then the SSO works in Windows 8.1. ... View more

FR ID: 2577 is the feature request ID. ... View more

Awesome..I was about to give you the same command. ... View more

Have you tried using the following command - clear session all filter ssl-decrypt yes source <source ip>. Also, By design, the user's choice to opt-out is honored for a fixed period of 24 hours and cannot be changed.  For the purpose of testing the opt-out page, the user may wish to use a different PC / different source IP / different user. ... View more

Hello, This feature is currently not supported. However you can submit a feature request through your Sales engineer. ... View more

Probably the proposals are not matching. ... View more

Below are a few docs which might help. Botnet Report in PAN-OS 4.0 Threat Prevention Deployment Tech Note - Page 44. ... View more

If using HA, make sure to change the HA to the dedicated ports in 5050. What needs to be edited ? It depends on what error you get. You would sometimes get an error stating as "invalid reference". ... View more

Hello Gururaj Below is some additional information - Dynamic Block Lists  Objects > Dynamic Block Lists Use the Dynamic Block Lists page to create an address object based on an imported list of IP addresses. The source of the list must be a text file and must be located on a web server. You can set the Repeat option to automatically update the list on the device hourly, daily, weekly, or monthly. After creating a dynamic block list object, you can then use the address object in the source and destination fields for security policies. Each imported list can contain up to 5,000 IP addresses (IPv4 and/or IPv6), IP ranges, or subnets. The list must contain one IP address, range, or subnet per line, for example: “192.168.80.150/32” indicates one address, and “192.168.80.0/24” indicates all addresses from 192.168.80.0 through 192.168.80.255. Example: “2001:db8:123:1::1” or “2001:db8:123:1::/64” IP Range: To specify an address range, select IP Range , and enter a range of addresses. The format is: ip_address – ip_address where each address can be IPv4 or IPv6. Example: “2001:db8:123:1::1 - 2001:db8:123:1::22” Field Description Name Enter a name to identify the Dynamic Block List (up to 32characters). This name will appear when selecting the source or destination in a policy. Description Enter a description for the block list (up to 255 characters). Source Enter an HTTP or HTTPS URL path that contains the text file. For example, http://1.1.1.1/myfile.txt . You can also enter a UNC server path. Repeat Specify the frequency in which the list should be imported. Youcan choose hourly, daily, weekly, or monthly. At the specified interval, the list will be imported into the configuration. A full commit is not needed for this type of update to occur. Test Source URL Test that the source URL or server path is available ... View more

Hello Have you had a chance to look at this doc. Hope it helps. Working with External Block List (EBL) Formats and Limitations ... View more

Is the 'flow_meter_host_throttle ' counter continuously incrementing ? Can you paste the output of show session info when the issue is happening. ... View more

'flow_meter_host_throttle ' - This means that the system is out of sessions and is dropping them due to the session table being full. No new sessions would be created under such circumstances. You can check the output of - >"show session meter"  to verify the same. ... View more

Appweb3 is the internal webserver.   This is responsible for the WEB-GUI. ... View more