Hi,
Just started out configuring a new PA3020 and decided to block all risk level 5... there are a couple of apps that I wanted to allow through so re-graded them risk 4.
In the future I want to ensure this is manageable, is there somewhere on the syst
...
Hi All,
Where do you find the Botnet monitor and reports for firewalls running 4.x from a Panorama interface running 4.x? And minimum level permission is required in order to see these Botnet reports?
Appreciate the assistance.
Hi,
We configured agentless User-ID with our PAN OS 5.0.2. We created policies using the AD usernames and it is working fine.
However, We are trying to configure our GP to authenticate using the AD users. This is not working and we are getting the foll
...
Hello
Could someone explain me why signature FTP evasion attack (id:30401) was disabled in thread update version 453?
This signature wasn't replaced by new one. Bruteforce attacs on FTP serwers still exist and nothing will change in this case.
With rega
...
Hi All,
Is it possible to have Local and LDAP users authenticate to the Global Protect Client.
In the GP configuration, I can only choose one Authentication Profile, which is chosen for Local DB.
I tried to configure another GP Portal but I could not us
...
Does anyone know if the PA supports dynamically updating the routing table on a PA FW based on PING results? Some vendors refer to this as IP SLA.
thanks
Daniel
For this scenario, assume a simple setup. Two firewalls in HA and two switches in a stack. Also assume the firewalls are in active/passive. Consider the below setup, each firewall has one physical link to separate switch members of the stack.
In this
...
Does the PAN allow you to clone or mask the MAC address on an interface to one of your choosing?
I'm experiencing an issue with a connection to an external voip server.
Directly attached to a PA-500 ethernet port there is a patton (fxo voip appliance).
Now, I'm allowing any traffic to outside, any application.
When I surf from that interface I can
...
Is it possible with global protect and split tunnel setup to have policies applied for url filtering to the local client so that sites can be blocked in split tunnel mode?
Hello,
Can you answer these questions regarding the tunel mtu that appears in the output below?
cstankevitz@PA-500-Local> show vpn flow tunnel-id 27
tunnel Sterling
id: 27
type: IPSec
gateway i
...
We have upgraded 5 of our BranchOffice firewalls from 6.02 to 6.03 yesterday. All updates went fine except one:
We are going to get an issue as soon as we want to connect via Global Protect to the Gateway. The window "Client Certificate Error" pop
...
SNMP can be used to get packets per second and bytes per second information for individual interfaces but not for an aggregate interface. Statistics from the individual ports need to be added manually in order to get the throughput of all the interfa
...
Hello,
What difference are between 'user eq' and 'user in' in filter of traffic logs?
I want to see output which is filtered by partial user-ID not full user-ID.
For example, There are as below user-IDs.
SA10001
SA10002
UQ20001
UQ20002
.......
I want to filte
...
BPry
on:
GP-Prelogon not automatically connecting
reaper
on:
Advanced DNS Security vs. DNS Security
| Subject | Likes |
|---|---|
| 5 Likes | |
| 3 Likes | |
| 2 Likes | |
| 2 Likes | |
| 2 Likes |
