Scheduled Log Export doesn't accept new SSH host key

Hi everyone,

today I reinstalled our syslog server which we use to archive the traffic logs of our PA-3020s (amongst some other things) and didn't import the old server's ssh host keys.

After updating the configuration for the Scheduled Log Export in t

Palo Alto Scan Clients for Antivirus

Hello,

I have a quick question regarding the capabilities of the Palo Alto's. In this scenario, we want to be able to deny computers who connect via SSL VPN (GlobalProtect) access to the network if they do not have antivirus on their machines. Can Pa

Reports - strange behavior (source host name)

Hello

Last time I spent a lot of time to customize reports under my requirements.

I realized some strange for me behaviour in custom reports.

If the IP has an entry in Policies >Addressses is presented in report with the name from Policies >> Addresses

VPN tunnels on a ubiquiti wireless connection

I have been able to create a vpn tunnel between a PA 3020 and an Cisco ASA 5505, but I am having issues getting a tunnel to come up on a ubiquiti wireless connection. I have checked and the wireless is working fine, it worked before I replaced my cis

Captive Portal and RADIUS Authentication

Hello,

Is it possible for Captive Portal to work with RADIUS or AD authentication in a way that if the user logs into their PC and authenticates via AD that they will not have to authenticate a second time via captive portal? Or, does captive portal

Captive Portal Response Page

Hello,

Is it possible for the response pages to be hosted externally on a web server or do they have to be hosted from the Palo Alto?

ICMP and other services in the same rule

Hi everybody, Is it possible allow icmp and other services in the same rule? for example allow icmp and tcp_25 between server A and server B but in the same rule and How do that?

Open a port

I am installing a caching server inside of my network. This caching server (PARCC Assessment) requires send and receive communication on ports 4480 and 4481. How do I open these ports for the particular private IP address of my server??

unknown-tcp going out to yahoo servers - pls update applipedia

part of my routine is looking for unknown-tcp and udp connections out. Love the feature.

For a while ive seen a good amount of unknown-tcp connections out to yahoo.com domains.

Anyone else seeing this?

PA: Are you guys looking into this so I dont ahve t

Searching Policy for different security profiles

Hi All,

       Is there a way to search on differentially assigned ( or null ) different security profiles ( AntiSpam / URL / Vulnerability etc ) within a policy ?

      We use a couple of different vulnerability profiles/URL Filtering profiles within

VPN is not applying dns suffixes to all clients.

I have a client that when on the VPN he can get to the root of his drive mappings, but he can't see all of the folders.  If use \\ipaddress\share I see everything.  If I use \\servername.domain.com\share it works.

I have append these dns suffixes set