General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

 

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

jforsythe by Community Team Member
  • 75 Views
  • 0 replies
  • 0 Likes

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 3326 Views
  • 2 replies
  • 14 Likes

PA-3420 will not detect SFPs on any port

My backup PA-3420 in an HA peer will not detect SFPs or link on any port (including copper) but the management. The primary unit detects and links on multiple SFP slots with multiple different SFP types and brands. The same SFPs in the backup unit wi

...

Resolved! Can not check Forward Trust Certificate

Hello. 

I'm having an issue with a setup of decryption.

 

we have a custoemr who wants decryption. and they also have an entreprise CA. 
to have the least user impact they wanted to use an entreprise signed certificate for their ssl forward trust. 

I crea

...

PA-3420 sudden restart issue

Hi all,

One of our clients has a PA-3420 HA-pair device with an active-passive setup, one day they noticed that their firewall went to reboot. Upon checking there are no signs on the system logs that encountered power interruption or hardware failure

...

Daryl_Cruz_0-1704781577308.png

Resolved! HA failover logs

In PA-3220, are HA logs enabled by default? Does these logs contain the reason for transition between HA primary and secondary?

Resolved! Botnet reporting error command failed with no output

Hi All,

Did a replacement of a PA FW 5260 (pan-os 10.1.x) with a 5420 (pan-os 10.2.7)

everything is working as expected.. however not able to view any botnet reports.

botnet config in place under monitor\botnet\configuration.

licenses are in place an

...

PA_nts by L3 Networker
  • 557 Views
  • 2 replies
  • 0 Likes

Cisco ASA PA ipsec issue

Hi,

 

We have recently come across an interesting issue between a Cisco ASA ikev2 tunnel with a PA. 

If I was to failover the PA to an HA peer, traffic initiated from the Cisco ASA continues to flow whilst traffic initiating from the PA stops.

 

I noticed

...

Resolved! Commit Error: failed to handle CONFIG_UPDATE_START Issue

Hi All,

 

I think  most of you had experienced this failure issue once in your worklife  This error reason is mostly because config memory usage is too high.

>debug dataplane show cfg-memstat statistics

As we all know the number of custom url is limite

...

Resolved! Queries on OSPF Route Summarization

Customer have configured OSPF peering with firewall and switches.

Have multiple OSPF peering with different ZONEs via each sub interfaces. Currently we are receiving around 4k routes at DCE-ES for each peering. Since ES switch hardware not supporting

...

Resolved! RTP traffic not matching App-ID Rule

I have a strange issue where I have a configured rule to allow the "rtp" and "rtcp" App-IDs with application-default service from any-to-any. Below that rule I have a generic permit-any rule with application service any. Screenshots below. The behavi

...

IanGraham_0-1704745546729.png
IanGraham_3-1704745826139.png
IanGraham_2-1704745786416.png

IP Sec VPN Paloalto - Starlink

I'm testing Starlink business and having issues passing traffic over my tunnel. This remote site connects to our data center via an IPsec tunnel. I can get the tunnel up and traceroute to the remote side of the tunnel, but I'm unable to pass traffic.

...

Resolved! problems with dns resolutions

Hello, I have a problem with a DNS resolution, in some users with the GP agent 5.2.10-6 we can reach a resource for example vmare.x.x, but with other users.
There are several important points here:
All users have the same version of the global protect

...

Palo Alto Version Upgrade Skip Intermediate Versions

Hi There,

  I'm trying to upgrade a firewall from PanOS 8 to 10, and I want to skip the intermediate versions.

The firewall is not in production. Is there any way I can boot the firewall directly to version 10?

 

I appreciate any help you can provide

...

Unable to license PAVM 30days Evaluation

Hi Folks,

 

i like to try the new opportunity from Palo Alto to test the PAN VM for 30days. But for me it seems that this is the standard VM without any license.

So here we go:

https://www.paloaltonetworks.com/vm-series-trial

Sounds for me like a full fea

...

florianhahner_0-1634026365798.png
florianhahner_1-1634026506686.png
  • 24124 Posts
  • 100 Subscriptions
Top Solution Authors
Labels