About Feldiasti

PAN-OS 7.1 Policy behavior change application-default In PAN-OS 7.1:     when a security policy rule is configured with the Application setting 'Any' and the Service setting 'application-default', the rule Action is now applied only on the standard ports for any application. For example, if a security policy rule is configured to allow any application traffic on the default application ports, web-browsing is allowed only on port 80. In earlier PAN-OS release versions, the Service setting 'application-default' was not enforced when configured with the Application setting Any.   As per my experiance i had changed all of  security policy rules were configured with the Application Service setting 'application-default' to any to.     https://live.paloaltonetworks.com/t5/Configuration-Articles/PAN-OS-7-1-Policy-behavior-change-application-default/ta-p/75664   https://live.paloaltonetworks.com/t5/Learning-Articles/Tips-amp-Tricks-What-Does-Application-default-Under-Service-Mean/ta-p/54167   https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os-release-notes/pan-os-7-1-release-information/changes-to-default-behavior   ... View more

i thank you all friends for your help, i appreciate it was very helpful @Feldiasti @pulukas ... View more

Dear Kang,   In PAN-OS 8.0 there are now 2 categories inside the URL Filtering profile where there was only 1 before. If you are not familiar with PAN-OS 8.0 URL filtering, for each URL category, you have "Site Access" and "User Credential Submissions". This is in the WebGUI under Objects > Security Profiles > URL Filtering > URL Filtering profile.   for more details kindly find below URL; https://live.paloaltonetworks.com/t5/Community-Blog/DotW-URL-filtering-with-PAN-OS-8-0/ba-p/157758 ... View more

Dear Radmin_85,   You can use the ACC tap on the firewall to track user activity, kindly find the below screenshot:  # in global filter tabe select Source User/Source Address and wite the User-ID or IP address. for further assistance kindly find below URL: https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os/url-filtering/monitor-web-activity-of-network-users#_66891   BR ... View more

Yes you can configure custom reports that the firewall generates immediately (on demand) or on schedule it: #First goto Monitor--> Manage Custom Reports and add a new Custom Report . #Next press on run now.  #after that yo can expoert this repoer as a PDF, CVS or XML,   for more information kindly find this URL: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/monitoring/view-and-manage-reports/generate-custom-reports#idb18675a2-f9d0-40d5-93b6-246a9b499747 ... View more