About Hiren_Patel

Hi All, One of our customers has the following requirement:   1) They would like to restrict document going out from their network which has more than 5 mobile numbers. Thus would require a regex of mobile no to be configured in Data Pattern.   2) They would like to restrict document going from their network which has more than 5 email ids. Email ids can have Gmail/Yahoo/Hotmail etc Thus would require a regex of email id to be configured in Data Pattern.   Is it possible to configure such regex for data patterns? if yes then please provide some format or examples of how it can be done. Regards, Hiren ... View more

Hi All, One of our customers has blocked the 'Music' category in URL Filtering but when we filter the 'Music' Category in ACC, it shows total bytes for the last 7 days as 5 GB.   So what do bytes really represent? Why does it show 5 GB when the category is blocked?  Please explain this in detail. Regards, Hiren ... View more

Hi All,   The customer has deployed Credential Detection feature. They are able to view logs of the same on the firewall.    They have the action as "Continue"  for  "Auction"  URL category. On submission of credential Response page do not appear and " SEC_ERROR_UNKNOWN_ISSUER" error is displayed. I checked the certificate when the error appears in chrome and found that it is Palo Alto certificate.(Please find attachment).  When the action is set to "block" fro credential detection, the warning page is displayed properly. We also checked "continue" action for URL and it properly displays response page, Is this an issue with Anti Phishing Continue Page? as everything else is working as expected Regards, Hire ... View more

Hi All, We had an incident with one of our clients where the one of the Ethernet  port on Palo Alto went down and the log severity which was reflected on PA was "informational", whereas client want this to be in a severe level like "high" or "critical"   Please let us know if the severity level can be changed to critical for link down on Palo Alto. I found this document where we can see that for port down the Severity is showing "Informational". https://live.paloaltonetworks.com/t5/Configuration-Articles/SNMP-Trap-for-Port-or-Link-status/ta-p/5... Please confirm whether the severity of ethernet port down will be Informational only. Regards, Hiren ... View more