About kadak

No worries Welligton. I am glad that I can help you. ... View more

Hello Welligton, I wanted to point out couple of important things for successful safe search enforcement: The following snippet was taken from the following document: New Features Guide 6.0 (English) (Page 26 onwards) Hope that helps! Thanks and regards, Kunal Adak ... View more

Hello aguley, Under Monitor tab, click on URL filtering logs. Under URL filtering logs, you need to have the 'source user' column. If it doesn't have by default, then you can add the column. Or you can enable it : Thanks and regards, Kunal Adak ... View more

Hello aguley, I hope you are looking into URL logs for X-forwarded information - not the traffic logs. Reference: x-forward source user information is not showing in traffic logs Hope that helps! Thanks and regards, Kunal Adak ... View more

Hello apackard, The top verdict of the WildFire report is the final result for the entire sample, while the individual verdicts that are marked as malicious/malware are on a per virtual machine (VM) basis. Each VM creates a verdict based on file types, such as, exe and pdf. The VM verdict is authoritative for the individual VM run, and the verdict on the sample is authoritative for the entire sample. Additional heuristics are applied to the sample verdict. In the above case, the individual VM displayed some malicious behaviors but the applied algorithm deemed the sample was not malicious. The sample verdict is the superior result. Thanks and regards, Kunal Adak ... View more

Hello aguley, I went through Enabling support for the  X-Forwarded-For HTTP header. document and didn't see the commit operation mentioned. If you have enabled it from the configuration mode, lets make sure you commit the configuration:  > configure # set deviceconfig setting ctd x-forwarded-for yes #commit force Regards, Kunal Adak ... View more

Hello Roman, It is working as expected because when filtering Objects you have 3 options [equal, not equal and is present] and with Description you have only [contains]. Here is how you can view your available options (click on the 'plus' sign on the right hand side top corner): Hope that helps! Thanks and regards, Kunal Adak ... View more

Hello CGSD, Looks like 'user name is ___empty_username___, domain name ' is not populating correctly for 8.1 Windows. May be this can help: GlobalProtect single sign on did not work Thanks and regards, Kunal Adak ... View more

Hello Ryan, If you are using PANOS 5.0 and above you wouldn't be required to include dependent applications in the security policies. Here is the document that explains the same: How to Check if an Application Needs to have Explicitly Allowed Dependency Apps Hope that helps! Thank and regards, Kunal Adak ... View more

Hello Erwin, Here is the document that explains how to configure PAN for dual ISP failovers: Dual ISP Branch Office Configuration In short, you would: 1. Configure a PBF policy on PAN FW in HQ1, to route Internet traffic via ISP1 and enable monitoring in PBF. 2. Configure an IPSEC tunnel between PAN FW1 and PAN FW2 3. Configure a static route in the routing table of PAN FW in HQ1 to route Internet traffic using tunnel as an exiting interface. Hope that helps! Thanks and regards, Kunal Adak ... View more