General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

question

session closes due to aging out but the traffic shows allow can someone explain to me what is happening

CurtisG by Not applicable
  • 1367 Views
  • 1 replies
  • 0 Likes

Resolved! dynamic block list

The setting for the dynamic blocklist gives you the selection of hourly, daily and weekly at _____. I understand the hourly, daily and weekly increment but at refers to what ?

jdprovine by L4 Transporter
  • 1633 Views
  • 1 replies
  • 0 Likes

PA5050 .configuration backup

Hi All,

Could you please provide doc for how to take configuration back up for PA5050.

I am planing to upgrade software version .6.0.3 to 6.0.10

KMallela by L2 Linker
  • 2300 Views
  • 2 replies
  • 0 Likes

How to report malware

Hi

I know that I shuld report by WilDFireportal - I did it many times but now I have a problem.

hxxp://www.kazevid.com/kSCdM3iIRbrKlZ contains malware reported as Trojan-SPY/Win32.emotet.qz or Trojan/Win32.vbkrypt.ynhg.

This email that contains such lin

...

_slv_ by L4 Transporter
  • 3016 Views
  • 1 replies
  • 0 Likes

syslog forwarding

I have  everything configured to send syslog information from the palo alto to one of our syslog server. My issue is that none of the security policy IP ranges allows me to send the syslog information for a specific IP address that is going out to th

...

jdprovine by L4 Transporter
  • 4692 Views
  • 14 replies
  • 0 Likes

Many users receiving Captive Portal

Dears,

We have been facing a lot of users identified by Captive Portal and not via UIA.

Does anyone could suggest any troubleshooting/best practices to avoid this kind of behavior ?

Thanks in advance!!

Resolved! Vulnerability assessment question

We're having a vulnerability assessment done, and want to make sure that the IDS/IPS part doesn't disable all attempts from the vendors IP addresses, just the application blocking/service blocking.

Can I whitelist the 4 IP addresses and put them in a

...

rivkin by L1 Bithead
  • 5563 Views
  • 12 replies
  • 0 Likes

Resolved! user Id issue with active- active HA

Hello Friends,

we have 2 firewall active-active HA mode. same LDAP configuration on both firewall. HA Active primary it working fine but secondary is not working. if primary goes down secondary work as a active, its also working fine. but it will not

...

Satish by L4 Transporter
  • 5723 Views
  • 4 replies
  • 0 Likes

Layer 3 switch behind Layer 3 PA-3020 interface

So I'm new to my PA-3020 and trying to get beyond my basic config has introduced a new problem for me.

I have a Layer 3 Cisco connected to my PA eth 1/2 via a routed interface on the switch.  My traffic is all working fine now, but I want to make some

...

GCA by L1 Bithead
  • 3130 Views
  • 4 replies
  • 0 Likes

Poodle Bits Vulnerability

Looking for some guidance on this. I am seeing a lot of Poodle Bits vulnerability showing up on our threat monitor. Digging into the threat, the first item is always showing our current router (192.168.0.1) followed by two different attacker host fro

...

jharlow by L3 Networker
  • 2014 Views
  • 3 replies
  • 0 Likes

Resolved! DNS top applications?

I recently installed a PA-500 on our network. Currently it is in virtual mode as I start to understand how to configure the device.  One of the things I have noticed is that consistently, DNS is the number 1 application. Second is web-browsing.  Just

...

jharlow by L3 Networker
  • 4408 Views
  • 2 replies
  • 1 Likes

GUI Bug: Dynamic Source NAT

Hi All,

Looks like there is a minor GUI bug in the NAT policy section of Panorama.  Do you all see the same thing?

Objects:

NameAddressEXT_FW_192.168.0.1192.168.0.1/24EXT_FW_5.5.5.15.5.5.1/24EXT_FW_10.0.0.110.0.0.1/24

NAT Rule:

Translated Packet

Type = Dyn

...

Slow management UI

Hi people,

I have a PA-2050 that is extremely slow while navigating the management interface. Why is it so?

Thank you for your help

//Ron

ron_maiga by Not applicable
  • 3555 Views
  • 4 replies
  • 0 Likes
  • 24272 Posts
  • 99 Subscriptions
Top Liked Authors
Labels