General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4254 Views
  • 0 replies
  • 0 Likes

Resolved! vulnerability block action

Hi,when creating a profile choosing block action is seen as "reset-both" on the logs.is that normal behaviour or not ? Thanks.

PanIst by L3 Networker
  • 10599 Views
  • 10 replies
  • 0 Likes

How to submit incorrect app classification?

I'm having some difficulty navigating this site. I want to submit the application "Xbox Music" as streaming music (http://music.xbox.com). Currently it's being classified under "xbox-live" (online gaming).

Maxstr by L3 Networker
  • 4165 Views
  • 3 replies
  • 0 Likes

How to allow a specific file extension

I work for a K-12 school district that uses a program that reads books to students. The file extension is .kes (KES is a file extension that belongs to Text Files of Kurzweil Educational Systems) and is blocked in our file blocking profile as an Encrypted ZIP file. Is there any way to allow the .kes file without allowing all Encrypted ZIP file...

almay by L2 Linker
  • 4954 Views
  • 2 replies
  • 0 Likes

6.1.3 update issue: Threat database handler failed

Hey all-I tried updating a test box to 6.1.3 and encountered the error in the title. Per other threads, I tried manually downloading the latest content version and installing but it resulted in an error during install. Has anyone else encountered this with 6.1.3 yet?

SDorsey by L4 Transporter
  • 6239 Views
  • 3 replies
  • 0 Likes

url_filtering problem

HI all,We have a cluster of 2xPA3050, for protection to untrusted zone. Last week we enabled the trial license for url_filtering. Since that moment we have met a special problem. We use a citrix application over ssl in the cloud. This citrix server is perfectly reachable, but after the authentication, the application seems to hang. We disabled a...

High Availability - Interfaces Passive Firewall are power off (down)

Hi, I have a firewll PA-3050 version 5.0.11 and the High Availability cluster is configured Active / Passive mode. The interfaces to backup firewall are powered off and I tried switch the configuration in Active / Passive to auto instead shutdown, but the interfaces still powered off .Can you help me ? How I can power on the interfaces in backup...

Resolved! URL Categories - match different categories

HelloHow do the PA decide which categorie it should use, if a web site matches 2 categories.Example: I have checked "www.paloaltonetworks.com" at Brightcloud. The result, it matches "Business and Economy" and "Computer and Internet Security".So I created a special rule set to deny both categories from a specific client. Result: site blocked.Now ...

TRisec by L1 Bithead
  • 8208 Views
  • 3 replies
  • 1 Likes

Resolved! TLS secured SMTP inbound inspection?

Hi,I've recently had a client who's PAN appliance failed to pick up a Zero-Day piece of malware that found it's way into their network via email.We have wildfire configured correctly and it transpires they are using opportunistic TLS on their mail relay, the spammer had send the infected attachement using TLS so the Palo Alto had no hope of actu...

Dpeters1 by L2 Linker
  • 18421 Views
  • 11 replies
  • 0 Likes

URL Filtering: Can't Block website when user use Google Cache

Hi all,I want to block a website whe user user google cache or translate.In the past i tested everything ok, Palo Alto could block when user use google cach or translate.But today, Palo Alto can't block website when user use google cache ( But can block google translate )Pls help me know why!!ThanksI creat URL profilePalo Alto Block website www....

dat.tran by L2 Linker
  • 12466 Views
  • 6 replies
  • 0 Likes

Resolved! Can the PAN device block HTTP Dos Attacks?

Hello Guys,I'm going to do some service availability test in the near future. We can't get any information of the attack pattern. The only information we know is that the tester will conduct these attack.HTTP CC(cache-control) attackSlowloris attackHttp post attackHttp Hash dos attackI'm afraid that those attack patterns seem to be normal for th...

JTR by Not applicable
  • 17728 Views
  • 14 replies
  • 1 Likes

PCI Vulnerabilities Report

Dear Friends, panos, panagent HULK hshah Steven Puluka hyadavalli mmmccorkleI have a doubt regarding PCI vulnerabilities scan and enable the signature for the same. when security team scan our WAN interface. he found below 1. SSL Certificate - Self-Signed CertificateVULNERABILITY DETAILSCVSS Base Score: 9.4CVSS Temporal Score: 6.9Severity: 2QID:...

Satish by L4 Transporter
  • 15553 Views
  • 16 replies
  • 0 Likes
Labels