General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Alert for static route failure.

I have a PA 3220 with two static routes, the two routes have different AD, Path monitoring has been configured in first static route with premtion enabled, my query is that can we generate email alert for the primary route down and secondary route do

...

A very weird issue

I have LinuxA (redhat 6.10) and LinuxB (CentOS 7.9) sitting in ZoneA accessing LinuxC (Ubuntu 20.x) sitting in ZoneB on http port without any NAT, jut routing and we have firewall rule to allow tcp port 80 (application ANY) for LinuxA and LinuB to co

...

dtran by L4 Transporter
  • 2000 Views
  • 2 replies
  • 0 Likes

Resolved! zone protecton reconnaissance not capturing obvious threat

Hello,

 

We are in the initial stages of setting up zone protection renaissance, and still playing with threshold and event values (currently set to 30sec, 5event).  I am also set to block the IP, for a small amount time, as we continue to adjust and b

...

Sherm_0-1631902886853.png
Sherm_1-1631903470957.png
Sherm by L1 Bithead
  • 3502 Views
  • 5 replies
  • 0 Likes

Found a bug?

Earlier I posted and asked if there were any technical considerations for renaming a DG.  I decided to rename two of them and validate on Panorama to see if it through any errors, it didn't, but I reverted anyway because I hadn't put in a change noti

...

Internet Traffic

Hi Community,

 

This is my first message and hope I am in the right place. I am tasked with taking our single internet connection (4Gbps) and carve in two lanes.  One lane will service normal traffic; internet, vpn, remote access, telephony, etc. The s

...

Resolved! S2S VPN between PA-3020 and Cisco ASA 5525

Hi All,

 

1st Post so hopefully i'm doing this correctly.

 

I am trying to setup a VPN tunnel to a 3rd Party. We have a PA-3020 and they have a Cisco ASA. They do have another Cisco in-between both our devices which is performing NAT. Hence we have enabl

...

CPS doesn't work

Documentation says we should measure CPS for creating baseline. I have done this for last 20 days collecting CLI output every 3 seconds and have Panorama data to back it up. Below is last 7 days data, CPS never peaked beyond 20K and on average is bel

...

image.png
raji_toor by L4 Transporter
  • 3598 Views
  • 5 replies
  • 0 Likes

Resolved! Scripting offline updates.

I would REALLY like to find a way to automate offline dynamic updates.  I’ve been trying to script the process with a bat file and plink.  I can get it to login with SSH but nothing after that.   I found a post, link below, on here from about 5 years

...

Bad_Goat by L1 Bithead
  • 4468 Views
  • 7 replies
  • 0 Likes

ha2 keep alive

Hi,

I am getting the below message  ,there is no specific interval (around  30 min) 

it  countinously happens from three days .

What is the action need to be taken 

 

HA Group 1: Local HA2 keep-alive up
04/15 14:57:47

HA Group 1: All HA2 keep-alives are dow

...

simsim by L4 Transporter
  • 13021 Views
  • 16 replies
  • 0 Likes

Resolved! PAN-OS for the PA3020

Hi All,

 

We have a range of PAN models and try to upgrade them all to 10.0.7 but find out the PAN 3020 does not have 10.0.7 available yet.

Either in CSP web site or software update on the firewall.

 

Do i miss a step somewhere ?

Please help.

Thanks

LeQ

Qui by L1 Bithead
  • 4108 Views
  • 4 replies
  • 0 Likes
  • 24197 Posts
  • 100 Subscriptions
Top Liked Authors
Labels