General Topics

Resolved! Internet Explorer 0 Day - Sept 17, 2012

Is there a signature for the new IE 0 day yet?

• https://isc.sans.edu/diary/IE+Zero+Day+is+For+Real+/14107
• http://technet.microsoft.com/en-us/security/advisory/2757760

There is a metasploit module out so.. that means there a working exploit 'in the wild'

Resolved! Sending user logins via Syslog

Hi all,

I have not found a way to send user logins to an external syslog server. I have traffic allows/denies coming through successfully, and "misc. system events." Is there a custom configuration that needs to be done to get user login date/time? We

Resolved! clear arp

Hi,

Do we have a option to clear arp entry for only one entry ?

I tried this command but it seems it clears all arp for an interface.

Resolved! Chrome Bypassing Captive Portal for Google Services

Hi,

PANOS 4.1.6

Client OS: Windows 7

Client Browser: Google Chrome 21.0.1180.89

I have PAN running with CaptivePortal (Public Certificate with AD Auth profile). Everything works fine when I use Firefox, Chrome and IE (in the case of IE except for the sma

Resolved! OSPF between PAN devices

Hi all,

I have the following scenario:

CPD 1: Internet ISP1 -- PAN1 -- ROUTER1

CPD 2: Internet ISP2 - PAN 2 -- ROUTER2

And a layer 2 connection between CPD1 and CPD2 (in different locations). Initially, there were only router1 and router2 (with their res

Resolved! Zero-Day Internet Explorer, Filter Update?

Is there any Threat Filter emergency update going out soon?

Microsoft Security Advisory (2757760): Vulnerability in Internet Explorer Could Allow Remote Code Execution

//DG

Resolved! is this possible for syslog

Hi,

We want all policies option log forward as syslog.Can we make this for all policies at one time or shoul we go to every policy option to select syslog. There are many policies.

Thanks.

Resolved! SSL for GlobalProtect / Captive Portal

Hi All,

I'm attempting to install a wildcard certificate on the firewall for Global Protect and Captive Portal without much luck.

Basically I'm trying to use the existing wildcard certificate, the organization has. Steps I've taken:

1) Export the certif

Resolved! PA-2000 HA Timers

Currently if I hard power down my primary firewall it takes about 6 Seconds for the secondary to take over, a bit slow really.

Changed most of the HA timers to their minimum, just checking to see if there is any other configuration that can be changed