General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

HA Pair manual syncronization

Good morning, I'm trying to understand the behavior with this command  request high-availability sync-to-remote running-config .  I have a HA active/passive pair that I had some config sync issues after an OS upgrade.  

If I want to push the active ru

...

danoman2 by L3 Networker
  • 2598 Views
  • 9 replies
  • 0 Likes

Variables is DNS Proxy rule?

Hi, 

 

My question would be, is it possible to use template variables to set primary end secondary dns for DNS proxy rules in Panorama?

 

I can set a static entrys' IP address value to a variable defined in the template, but can't find the way to do the

...

Resolved! Firewall replacement procedures

We are planning to replace PA-3260 with PA-3430, can anyone suggest the procedures and prerequisites to be followed before replacing the firewalls.

Currently the firewalls are managed from Panorama.

Cannot block theoxymoron.xyz

Hello, I have been trying to block the site theoxymoron.xyz but can not get it to block.  I have tried URL filtering with many different versions of the URL as well as blocking the IP addresses for the site, neither of which worked for me.  We do not

...

Stuck in a customer support loop

I'm trying to setup my PA-220 to use the AIOps and need to login into the Palo Alto customer support portal.  I have not logged in for a long time, but when I use the account associated with my device, it tells me "Unable to sign in".  Trying forgot

...

3dmaxer by L0 Member
  • 1110 Views
  • 2 replies
  • 0 Likes

Montioring DHCP with ManageEngine

Hello all.  We are demoing ManageEngine's OpUtils which advertises it can monitor Palo Alto DHCP scopes.  I have it connecting to one of our palos via Web API credentials just fine, it just doesnt return any data about the DHCP that is configured.  I

...

Resolved! Two Static Route - same destination, Same metric

Two Static Route - same destination, Same metric

 

Hello, good afternoon, thank you very much for your time, collaboration, time and suggestions.

 

Thinking in an environment where you have two routes to the same segment, example a pair of static rou

...

Metgatz by L4 Transporter
  • 3127 Views
  • 2 replies
  • 0 Likes

Self Signed Certificate for GlobalProtect VPN

Hello All!

 

We are having an issue regarding the Palo self-signed certificates.

As suggested without 3rd party paid certificate we are using a self signed CA and a certi issued by the CA.

(added to the proper ssl/tls service profile)

 

But the vpn portal

...

DNS Security Logging PAN-OS 9.1

Firewalls with DNS Security enabled and working in PAN-OS 9.1 logs are not visible in AIOps DNS Security (Activity:Dashboards > DNS Security - View all DNS Requests).  How to ensure firewalls and Panorama are properly configured and log data is reach

...

PAN and intermediate CAs

Last couple of days I've had quite a few cases where I had to manually add intermediate CAs as a Trusted Root CA in order for decryption to work (for customers blocking untrusted CAs already on firewall).

 

These are quite well known intermediate CAs

...

santonic by L6 Presenter
  • 1615 Views
  • 2 replies
  • 0 Likes

Resolved! Multiple ISPs with Path Monitoring

Hi All

 

Need a sanity check.  When deploying multiple ISPs using path monitoring, instead of policy based forwarding,  should the 2nd ISP become unreachable?  It makes sense that it does, but it wasn't mentioned in Palo article about it

 

Setup woul

...

SCP Export Error PanOS 10.2

Hello everybody!

 

It appears that PanOS 10.2 has the ability to export Software.  However, I'm receiving the following error when attempting to do so.

 

For reference, I am attempting to do this from Panorama.  The scheduled config export to the sa

...

schroedera_0-1666884171644.png
  • 24196 Posts
  • 100 Subscriptions
Top Liked Authors
Labels