This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About zanonibs
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About zanonibs
08-18-2015
16Posts
4Likes
0Solutions
Aug 18, 2015Last Visited
User
Activity
User
Profile
Latest posts by zanonibs
| Subject | Views | Posted |
|---|---|---|
| 7015 | 06-21-2011 03:11 PM | |
| 3846 | 06-17-2011 03:09 AM | |
| 1661 | 06-17-2011 03:00 AM | |
| 2489 | 06-17-2011 02:45 AM | |
| 1831 | 06-15-2011 07:23 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 06-17-2011 02:45 AM | |
| 1 Like | 04-15-2011 11:35 AM | |
| 1 Like | 05-03-2011 11:31 AM | |
| 1 Like | 05-21-2011 08:55 AM |
User Badges
Community Statistics
| Member Since | 10-08-2010 04:04 AM |
| Date Last Visited | 08-18-2015 09:06 AM |
| Posts | 16 |
| Total Likes Received | 4 |
06-21-2011
03:11 PM
Hi, I'm doing same tests using IBAN codes and your results are similar to mine. I've also opened a case of 2 months but no real solution was found over DLP. In my opinion DLP lacks some capabilities: 7-bytes error doesn't permit to have short & composite pattern. Without the keyword it's impossible to verify the real information (eg the pure IBAN number in the various variants) There is a limit in pattern length and after that the commit phase can't be accomplished (no response from engine) I've tried also with the new 4.0.3 but nothing changed. I hope in future improvement. Other vendors DLP is better.
... View more
06-17-2011
03:09 AM
This can be a choice, VPN without split tunnel. All traffic from the remote office to the central site for inspection and filtering. You save devices/licenses and add the unique apps control but the required bandwith is double than the stand-alone case. This is a test I want to do with ASA 5505 <--> PA-2050 controlling if PAN is capable to do routing & inspection in the same interface (ASA can't do) Another solution could be Firewall as a Service. Virtual Firewall (PA 2000+ can do that) in central site used as branch office firewall, a crypto (IPSEC) or private connection (MPLS / own fiber) is needed.
... View more
06-17-2011
03:00 AM
Done for a PA-500 from 4.02 to 4.03 without any problems. I have seen only minor changes, from the documentation it's a bugfix.
... View more
06-17-2011
02:45 AM
1 Kudo
Update after 2 month from opening the case: Problem still remains even with the new 4.0.3 due to limit in long regex pattern. There is a limit that you can't trespass that generates errors in commit operation like commit failure or commit thread not responding. For now DLP has big limitations respect other vendors and I want to remark that having a strong DLP support is quite important in this kind of device. Please verify the error in the future and improve this feature. Now the case with the support is closed with the note: not solved. By the way thanks to the support team.
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks