About blaketraister

Hey guys...so I have a request  - Users in my company who are not up to speed on corporate training will be added to the "corp\DelinquentUsers" AD group.  I need to make sure that these guys are only allowed to go to 5 websites while they are part of this group. Currently HTTP access is anything unless its matched in our URL blocking profile (Gambling, drugs, pr0n, religion, etc).  If you did NOT match the Delinquent Users AD group, then you would fall through to this rule. Im a little unclear on how to set up the URL filtering profile.  Can I just put a * in the blocked sites dialog and then the 5 sites we allow in the allowed sites? ... View more

I was just curious...if I have 2 internet feeds but am not peering - I use ip/SLA to guanratee service.  If a ping to 4.2.2.2 fails, it drops the current default route and the other default route with the higher AD is the active default route. Is there something similar to this in PAN-OS? ... View more

We had something weird happen last night.   I had a PAN 4050 HA Pair that I had to move the primary power supplies to a different PDU with a lower load.  In each case, the firewall rebooted - we had no warning, no notification, they didn't throw any logs. We were fortunate last night - it was midnight on the east coast so it probably went unnoticed by users, but seriously you guys - is there a way we can have more visibility and control over the power?  I have a ticket open to deal with this (We lost one of the power supplies so i also had to order an RMA) ... View more