About jesuscano

We can not understand at all how Wildfire works.   We realised that WF detects files that have been downloaded and categorized as malware can continue to be downloaded for a long time, this behavior is not the expected, which indicates that once it is categorized as malware, the signatures are automatically updated in a short time and the next time it can no longer be downloaded. We also do not understand how a file (being malicious) can be downloaded the first time.   Why WF detects a malware and this file can be still downloaded? why WF permits the first file to be downloaded to get veredict? any document about how WF analysis works to solve this doubts? thank ... View more

Hi,   We have this fqdn object created:  2021-01-08 12:26:14.872 +0100 dnscfgmod: Fqdn SIEMENS OWNCLOUD SERVER/cco.siemens.com could not be resolved   If i run a ping from MGMT A interface is resolving: ping host cco.siemens.com PING cco.siemens.com (212.231.11.154) 56(84) bytes of data.   The DNS is OK, reachable, and resolving.   If i go to the web and clik solve in the object is also resolving:     But in FQDN list is not resolving so the rule is not applying.   request system fqdn show: cco.siemens.com (Objectname SIEMENS SERVER): Not resolved   WHy is happening this? any file to check deep tshooting?   ... View more

Hi,   We would like to run a script for the users when GP VPN goes UP. This script is for mapping network drives in theclients.   Is possible to do that? any link with info?  ... View more

Hi,   We are having issues with cisco jabber using Global Protect.Clients reported that the jabber status (online/offline) is wrong so they have issue calling. The rule VPN-SSL zone to inside is any/any, so no restriction. Looking in pcap we can not see any drop. I have no evidence in the FW but the common point is the Palo with VPN GP. Have you reported any issue with jabber using GP???? ... View more

Hello,   i am seeing this counter increasing and I am not sure if i should be worried:   > show counter global filter delta yes Global counters: Elapsed time since last sampling: 0.15 seconds name value rate severity category aspect description -------------------------------------------------------------------------------- pkt_recv 289 19266 info packet pktproc Packets received pkt_recv_zero 216 14400 info packet pktproc Packets received from QoS 0 pkt_sent 371 24733 info  packet pktproc Packets transmitted pkt_alloc 200 13333 info packet resource Packets allocated pkt_inconsist 292 19466 info packet pktproc Packet buffer pointer inconsistent     can anyone tell me what means this counter? ... View more

Hello,    After upgrading to 8.1.X > 9.0.X > 9.1.x. we found that some ldap users do not check per user policies, only for ip politicies.     The firewall has no user-id configured, only tree server ldap.   we check that the firewall recognizes the Ldap tree.    Is there any issue of incompatibility with the version?   Thanks.  ... View more

Hi,   We would like to know if its possible to configure Palo Alto GP gateway in order to permit connect using Cisco anyconnect client? what it would be the config to do that? ... View more

Hello! Does anyone knows if it's possible that the information of IP assignment/deletion for Global Protect users could be updated to Windows DNS servers?   Thanks a lot ... View more