Rate Limit Per user on PA200.

I have PA200 runing PANOS-7.0.6 . Is it possible to rate limit per user. One of the user downloaded 4x1gb files and caused net congestion for other users.

how to manage palo alto ssl/tls service profiles using cli

Its easy enought to change the ssl/tls service profile in the gui but how is it done throught the cli. I want to make sure I know how to do it in case I mess up my gui access.

Sort ascending or descending in Custom Reports

I am trying to write a Report that shows the least number (e.g. 50) of used rules in my firewall.  The sort feature in the custom report builder only is sorting from largest to smallest.  I can't see how to reverse this.  Anyone know?

management interface certificate

How can you remove certificate from the management interface using CLI? This is assuming that the cert blocks you from getting into the GUI

Best Way For Configuration of 5 PA-200 Before Shipping To Remote Location

The next big project, regarding Palo Alto, is deploying a total of 5 PA-200’s. 4 will be located in 3 different locations in Mexico. 1 Mexican location will have 2 PA-200’s setup in HA mode. The remaining PA-200 will be deployed in Managua, Nicaragua

Can't access management when PA200 is in line

I have a PA200 and when I only have the management port plugged in, I can access the management interface. When I put it inline and have production traffic running through it, I'm no longer able to access the management interface. I have two NAT rule

Panorama auto-commit fail

Hi guys,

 Have you ever a problem with auto-commit on panorama caused by the reboot of "configd" process ?

Thank

PA-5060 OSPF neighborship flapping after reboot

Hello everyone,

Having an issue with OSPF neighborship constantly going up and down after reboot. Please see below:

Has anyone had a similar issue?

Thanks,

Myky

Active Directory group naming scheme

Hi all,

I'd be interested to here is anyone has come up with interesting naming schemes for AD groups used within Palo Alto firewall policies.

I'm looking for inspiration as I'm looking to come up with a logical scheme on our end.

Cheers.

Local admin account locked

I have a cluster of two Panorama systems.  When I try the local admin account on the primary-active node the system generates a log entry saying that 'failed authentication for user admin.  Reason: User is in locked users list.  The same account name

BGP "no enforce neighbor-as" option?

Hi,

Is there a configuration avaialble to not enforce the requirement of a BGP peer including their AS in the advertised path?

This is required in peering exchanges where there are central route servers which function transperantly by advising of nex

SSL Inbound Inspection

Hi,

I have setup a decryption policy to decrypt inbound SSL traffic for the Exchange web mail server. However, when I check the logs I see only some traffic as decrypted and some arnn't. Refer below screenshots,

Why isn't the policy not decrypting all