General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

 

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

jforsythe by Community Team Member
  • 314 Views
  • 0 replies
  • 0 Likes

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 3660 Views
  • 2 replies
  • 14 Likes

Resolved! Is it possible to write a rule matching any IP ending in .xx

Hi all,

I have a question, is it possible to write a rule that matches only a part of the IP address? For example match any IP ending in .51? Using wildcards this would be  *.*.*.51


Put another way, i would like to match all IP's that are x.x.x.51 wher

...

Saqib by Not applicable
  • 4921 Views
  • 8 replies
  • 0 Likes

How to add static routes on panorama M-600

Hello ,

 

We have M-600 Panorama device and we need to get 2 seperate networks :

MGT : for firewalls administration and to receiving logs ( this network is isolated from internet)

Ethernet 1/2 : a new interface just to make panorama reach internet for up

...

Elwess by L0 Member
  • 1554 Views
  • 1 replies
  • 0 Likes

opcmdhistory log missing in PanOS9.1

I noticed that the “opcmdhistory” log disappeared in Panorama after upgrading to PanOS9.1.It was there in 9.0 and previous  versions.

 

Do you know why it changed and if the information is in another log file? I was using it for troubleshooting and det

...

batd2 by L4 Transporter
  • 1335 Views
  • 1 replies
  • 0 Likes

Resolved! Getting LDAP Error

Our client is having issues with LDAP connectivity.

We are trying to configure "Group Include List" in the Group Mapping Settings in User Identification but when we click on the Base DN to browse available groups, we get "Connect error".
 
Same thing sh
...

Access problems via Globalprotect with AD group.

Hello everyone,

I am relatively new to Palo Alto solutions and I face a problem that has been going on for over a week. Could anyone help me?

 

This is the scenario:
- I have gateways 01 and 02 for the GlobalProtect.
- AD groups called Grupo1 and Grupo2.
-

...

Amaro123 by L2 Linker
  • 5483 Views
  • 12 replies
  • 0 Likes

Resolved! API Keys in PanOS 9.1

Hello All.

Do you know of a way to see all generated API keys on Panorama 9.1? Similar command exist on the wildfire appliance, but I could not find in Panorama. 

Also, does anyone know how the API generation process works in 9.1? Are they keys persist

...

batd2 by L4 Transporter
  • 4006 Views
  • 4 replies
  • 0 Likes

Resolved! How to parse and filter proofpoint list

Hello,

Since the default proofpoint miner is not working 'im trying to find a workaround to be able to download and filter the lists.

I have tried to use the generic json or csv miner but i'm having issues with both:

 

With the json miner I receive 0 val

...

Block domain *.*covid*.*

Hi Team

can we blocked domain in palo alto if domain name contains is *.*covid*.* in palo alto.

 

I was also wondering whether blocking such domain will be better through dns sinkhole or URL filtering.

shubhamG by L1 Bithead
  • 1642 Views
  • 2 replies
  • 0 Likes

ISP Router connection best practice

Hi All,

 

Just looking for advise , pros vs cons about connecting an ISP internet feed directly to our core mpls/vpls switch.  

ISP Internet Router—>adva—>Core Switch(siteA)—>mpls/vpls—>Core Switch(siteB)—> Palo Alto

 

The PA firewall will have a separate

...

MistryJa by L1 Bithead
  • 1926 Views
  • 2 replies
  • 0 Likes
  • 24189 Posts
  • 100 Subscriptions
Top Liked Authors
Labels