About dannon

Hi @dannon    I have added your FR IDs to the list. And in addition I have some comments: @dannon wrote: 1.   run a "user activity report"  in the "Download URL logs" link which open up a CSV file, please in this file include either the original Username or IP address which was entered into the box on the original "User Activity Report" dialog. We are concerned that Lawyers might not hold the file up in court since it doesn't have a username / IP tied to it.  Only the "Download User Activity Report" has that. - FR11763 What abour simply downloading the logs directly from the URL logs? The boss specifically is concerned about detailed user report - he has a specific need to see all traffic for a particular user.  He says it allows the ability to see "intent".  It's because our HR dept is very wishy-washy and don't want to repremand someone unless there is bullet-proof evidence.  I guess the boss is extending this rationale to a legal scenario.  I don't always agree with the logic, but it's what he wants to see.   @dannon wrote: 3.  Show current interface bandwidth in a dashboard widget. Be able to log over time. -   FR4507 Since PAN-OS 8.1 there is a device health monitoring in panorama which includes bandwidth We only have 1 firewall, so aren't going to get buy Panorama.  Would be nice to add a widget to the existing dashboard natively.  I would think it wouldn't be that hard.   @dannon wrote: 5.  Allow the GUI to change colors - themes.  Maybe a dark theme?-   FR11765 This is already possible with browser extensions (maybe even directly in the browser) by enabling high contrast modes or by changing the css. I've had other vendors (Fortinet) that allow this natively.  It's not a high priority, but since others can do it, why not Palo?  I just thought I'd add it to the list for the future in case someone else wants the feature too.   @dannon wrote: 6.  In "Response Pages", have a "Preview" link, so that we can see the page quickly without having to download and open in another browser.  Useful when making changes.-   FR913 Because of the low number of this feature request this one is already pretty old so I think the chances that this (checkpoint) feature will be implemented are not that high... Understandable, but again, included just to have a request out there.     Tags (0) Add tags   ... View more

Reached out to my SE with these:   1.   run a "user activity report"  in the "Download URL logs" link which open up a CSV file, please in this file include either the original Username or IP address which was entered into the box on the original "User Activity Report" dialog. We are concerned that Lawyers might not hold the file up in court since it doesn't have a username / IP tied to it.  Only the "Download User Activity Report" has that. - FR11763 2.  Log and report search keywords - user typed in suicide into Google -   FR6186 3.  Show current interface bandwidth in a dashboard widget. Be able to log over time. -   FR4507 4.  Log /report / make a column header the TLS/SSL version detected on HTTPS sites. -   FR5678 5.  Allow the GUI to change colors - themes.  Maybe a dark theme?-   FR11765 6.  In "Response Pages", have a "Preview" link, so that we can see the page quickly without having to download and open in another browser.  Useful when making changes.-   FR913 7.  Allow for more "User Activity Report" customization - pie charts, different bar charts, color, tables, etc. -   FR11764   ... View more

I'd like to add a feature request: run a "user activity report"   in the "Download URL logs" link which open up a CSV file, please in this file include either the original Username or IP address whihch was entered into the box on the original "User Activity Report" diaglog.   We are concerened that Lawyers might not hold the file up in court since it doesn't have a username / IP tied to it.  Only the "Download User Activity Report" has that.   Thanks, dannon   ... View more

Here is what I have setup right now.  I've see that article before.  What I am wondering is what to set things now in order to get things normalized like they were before.   ... View more

I saw this also.  I upgraded to User-Agent 8.1.0 and started seeing strange things.   Release notes said Palo changed default naming convention and that it won't display it as domain\username anymore.   I was seeing lots of user@domain.name and a lot of machinename$ listings. I didn't know how to fix.   I got burned and rolled back to prior version.  Issues went away.   FWIW Dannon   ... View more

I experienced similar issues.  We have a group of users with access to only a few websites.  In order for them to display properly, I had to watch each one in the logs and also whitelist all the other linked sites like CDN URLs, etc.   It worked, but took time, but I got hit up for it a week later because there was a spot on the webiste I didn't go to that had another URL I needed to whitelist.   Terrible pain in the bum for sure.   Whish there was a more elegant way. Dannon   ... View more

We looked at this scenario and found that a prodcut like Cisco ISE or similar Network Access Control product would do this.  Cost prohibitive for us, so we just have to live with it for now.  I would much prefer to know who is coming and going on the wired / wireless networks here.   ... View more

My case as well.   I had an issue open for 2.5 months.  I tried escalating the case, but it never did.  One of my calls, the tech couldn't even determine the windows server version we were running for our User-ID agent.  I had to show him how to get that info.  My boss finally had to call our new SE (never told the old one left) and threaten.  We got good service then.   SE told us that Palo prides themselves on top-tier support, but in the last year have grown so much that they can't get competent people to fill level-1 support.  We had a meeting with our SE and the regional manager and they both said Palo is very aware of the problem and are actively taking steps to fix.  He said this comes from almost the very top of management.   I hope Palo comes through. Dannon   ... View more

Ok, I will just sit on it for now.   In response to the other poster, yes, our licenses are current and valid for wild-fire and the other 4 palo features we have.   Thanks. Dannon   ... View more

Our students range from K - 12 and can end up using a chromebook at some point.  We don't have a 1:1 initiative, but they get a lot of use.  We have like 3K of Chromebooks here in our District.   Yes, having Global Protect wouldn't work.  Our teachers have a hard enough time getting students to log in properly with their Google@edu email and password.   I've talked with my Palo SE and he said Palo doesn't have anything on the horizon (again).  Maybe it's because Palo is a firewall first, and internet content filter second.   Pitty though.  Other products are adding Google hooks via their API to allow such things.   -Dan     ... View more

Yeah,  I watched the webinar for that one and tried to set it up, but i couldn't get it working.  I tried to contact the authors, but never heard back.   Shame, really.  Palo should fix this, as many other internet filter vendors have support.   Dan   ... View more