General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Filter items from source feed

One of the feeds I would like to import is the alienvault feed.  However, I only want a subset of the IPs listed.  I have tried using a regex with a transform to limit the results, but the miner is still showing an indicator count of 54,000.

 

I clon

...

deanm by L2 Linker
  • 7951 Views
  • 11 replies
  • 0 Likes

Resolved! HA configuring questions?

Hi folks,

 

A couple more questions about HA, if you please.

Hopefully my post frequency will reduce after training next week.

(Yes, configuring HA just before the training this weekend)

 

I will configure HA on an existing running production PA-3020 and t

...

OMatlock by L4 Transporter
  • 3787 Views
  • 9 replies
  • 0 Likes

Resolved! Bootsrap Image Error

Hi All

 

I am seeing the following in the system log of a PA-200 on reboot:

 

 critical hw             bootstr 0  No bootstrap media detected

 

 

I can't find any reference to this message anywhere and indeed all the errors that can be ebcountered while boo

...

Export Configuration

Hi,

 

It is probably very simple thing.. I wish to retrieve full configuration of Palo Alto firewall to build new firewall which will NOT be managed by Panorama.

 

Could someone please suggest me procedure or command on how to retrieve (via web or cli -

...

session QoS rule

Hi,

i have created a qos rule for skype and assign class which is real time ,

When I look in to the session details I could not find the session qos rule .

 

 

 

How to interpret the details ? 

for example like flow1 c2s and flow 2 c2s and PRED

any related d

...

skyp.jpg
simsim by L4 Transporter
  • 1769 Views
  • 3 replies
  • 0 Likes

Resolved! Policy application question

Hi

 

So I created an application 

 

TEST HTTPS tcp/443

TEST HTTP tcp/443

 

and a policy from any where to 10.10.10.10/24 application TEST HTTPS & TEST HTTP allow

and then deny everything else

 

if I go to my test box say 10.20.20.20/24 (different network), pre

...

Migrate from Check Point to PaloAlto step by step

Hi guys

I have some document that I made about migration from CP to PA,

Please feel free to contact me if you had some issue with that migration.

If you want the PDF file, please check the following link:

http://zwerd.com/2017/09/05/paloalto-migration.ht

...

Document-page-001.jpg
page2.PNG
Document-page-003.jpg
Document-page-004.jpg
guyzwe by L0 Member
  • 3057 Views
  • 1 replies
  • 3 Likes

7.1 default behavior changes

So I was reading about OS 7.1 because I am planning on upgrading from 7.0.12 to 7.1 and found some information of the default behavior of app-id

 

 

appid.PNG
jdprovine by L4 Transporter
  • 3796 Views
  • 12 replies
  • 0 Likes

Panos 8 - MAC OS user mapping issues

 

Hi all, we are using 802.x1 authentication on wired network (MS NPS radius). Windows users authenticated fine, however with MAC user i have big problems, some of them mapped correctly and some not, sometimes half of the traffic mapped and half not m

...

Vovale by L0 Member
  • 1144 Views
  • 0 replies
  • 0 Likes

Resolved! Path Monitoring question?

Hi folks,

 

Preparing for my HA configuration this weekend.  

 

I have a question about creating a Path monitoring group on the Passive device.

 

While I go through the procedures to configure HA on the Active device, I plan to set a Path monitoring group

...

OMatlock by L4 Transporter
  • 2179 Views
  • 3 replies
  • 1 Likes

Domain Prefix Inconsistent in IP User Mapping

I have a problem with IP User Mapping. I has configured IP User Mapping using this article:

 

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-Agentless-User-ID/ta-p/62122

 

But when I list users, I get inconsistent user domai

...

User ID Agent Setup 01.PNG
User ID Agent Setup 02.PNG
Monitored Server.PNG

Finally IPv6 over GlobalProtect, or should i say v6IP?

About 2 months ago I was thrilled to hear that PANOS 8 was coming out and that it would bring us IPv6 inside a Globalprotect VPN. After fixing the "licence issue", i finally came arround to doing the upgrade and eagerly started to configure a tunnel

...

P.Braat by L1 Bithead
  • 3495 Views
  • 6 replies
  • 0 Likes

Log Card Interface Issues

We have configured a log card interface on one of our 7050 devices for submission to wildfire. This is not working. 

Our testing shows we cannot ping the default gateway conifgured on the interface. If we ping from the router, then no response is reci

...

  • 24274 Posts
  • 99 Subscriptions
Top Solution Authors
Top Liked Authors
Labels