General Topics

Resolved! Help with traffic reports... How can I do a report based on an ip range.

I am pulling my hair out here.

I am needing to generate a report for certain traffic based on specific ranges of IP's.

These ranges are client addresses in relation to the respective building they are from.

I need to know if it is possible to do any ran

...

Globalprotect portal should be aware if agent is already installed

For users that goto the portal and are prompted to download the agent, if they already have the agent installed, going to the portal should bring up the GP agent connect panel or prompt user that they have it and to run it vs d/l and install. We keep

...

Email Notification when a user logs into the PA Box.

Hi team,

I am working on case: 00188973 where the customer want to get a real time email notification when a any user logs in to the firewall via GUI or CLI.

Do we have any such feature available now on PA Box.

If not, DO we need to raise a feature requ

...

Resolved! acc risk factor

Hello Support Team,

I'd like to know a mathematical formula of acc risk factor.

It doesn't seem a session-based average value.

Regards,

Tomoyuki Komure

Application block page - not enabled by default

I've noticed in PAN OS 5.x that the application block page is not enabled by default. Obviously it can be manually enabled.. but was this done for a specific reason to address some common problems experienced by customers?

I could surmise that perhaps

...

PAN-OS Ver 4.0.5. What version should I update to?

My PA-500 is currently running on PAN-OS ver 4.0.5.

What is the recommended version i should update to?

4.1.16 or 5.1.11 or 6.0.0?

Thanks and regards.

Convert from vwire to layer 3 for globalprotect.

I'm trying to put together a plan of action to get globalprotect to work for us. I have a work ticket open with PA. Our PA firewall is currently deployed in a VWire setup, on the lan side of our router. Here are my big questions for getting this acco

...

Resolved! SYN-Flood packets dropped by unknown rule

Hi everybody,

we got a lot of syn-packets which were dropped by the rule any-allow. But we haven't this rule, so is it a inbuilt rule and

why do i need a DoS-Rule to be protected against Syn-Floods if there is a builtin rule.

Cheers klaus

Response Page Operation

All,

So, just a possible silly question about the order if you will of response page activation - specifically around the Application Block and the URL Block. Per the documentation:

Application Block Page: Activated when application access not allowe

...

Resolved! Decryption policy Issue

Hi All,

I'm just trying to configure decryption. because I'm facing Issue while blocking applications(not all the applications got blocked as the policy supposed to do).

First of all, I'm using Trusted CA, and here you are the steps I followed To gener

...

Resolved! GlobalProtect with NATet interface

I have a PA200, and is using eth1 for outside (internet) and eth2 for inside. I'm NATing from eth2 to eth1, as normal.

Now i want to have the management https address on the eth1 for several reasons.

At home its just for testing, but at my office i hav

...

dynamic updates are downloaded but not installed

hey

we have a cluster that is configured to download and install updaetd but we can see that it is only downloading them and doen not update,

where can i find related logs on the device? (PAN-OS 5)

Dropbox (again)

Hello,

We have a requirement to do the following

Block dropbox for some users

Allow dropbox web for some users but block app - use ssl decryption to control uploads

Allow ALL for 2 VIP's - no decryption required

Is this at all possible?

Resolved! Panorama 5.1 with fw PanOS 4.1.14

Hello Everyone,

We deploy a panorama 5.1.4 and 2 fws are managed on it, one of the fws is running PanOs5.0.8 and another one is running 4.1.14. We can see the fws normally on Panorama -> Managed devices and Templates tabs. however when I finsh a ldap-

...

Resolved! DHCP Service

In the PA software support Boot Server Host Name and Bootfile Name options?

Discussions

Resolved! Help with traffic reports... How can I do a report based on an ip range.

Globalprotect portal should be aware if agent is already installed