General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Discussions

Defining patch management in HIP objects.

Hi All,

We are configuring global protect with HIP enabled.

Our requirement is, If the patch defined in the HIP object is missing in client machine then access should be denied. Below screen shows the patches (windows updates) for windows 7 machine.

Fro

...

Gururaj by L4 Transporter
  • 7026 Views
  • 11 replies
  • 0 Likes

Resolved! BGP Graceful restart in an Active/Passive cluster?

All,

Quick query, we are in the process of implementing a HA cluster that will be BGP peering with several upstream routers, both route import and export, and in trying to reduce the interruption due to a failover we are looking to implement the Grac

...

Resolved! IPSec VPN Setup for Avaya Phone

I am attempting to setup an IPSec VPN tunnel to connect to remote Avaya phones. I am not sure if I am doing it correctly. I've set up a new IPSec tunnel and configured it to use dynamic IP for remote peers. I am not sure if this is correct or not. It

...

mario11584 by L4 Transporter
  • 20672 Views
  • 16 replies
  • 0 Likes

GlobalProtect Client Auto Login Woes

Hello,

We are testing the GlobalProtect Client (version 1.2.2-14) and are experiencing an issue. We use Windows automatic login for some custom deployment tasks, but are experiencing odd behavior and possible bug.

With the AutoAdminLogon, DefaultUserna

...

ToddJames by Not applicable
  • 6513 Views
  • 6 replies
  • 0 Likes

Resolved! GlobalProtect Portal HTTP redirect

Dear all,

We're currently testing the GP VPN solution before we roll it out to our notebooks. We noticed that we can only access the portal homepage if we explicitly enter "https://<portal-url>". It doesn't work with just "<portal-url>" there HTTP wou

...

oschuler by L4 Transporter
  • 10617 Views
  • 6 replies
  • 1 Likes

Resolved! IPSEC Tunnel to ASA - PeerID issues

I am setting up an IPSec tunnel to an ASA. I am getting an error message about the PEERID type only allowing IP but received FQDN. Per the other KB article, I changed the PAN Exchange mode to Aggressive.

Now the PAN received a FQDN of the ASA side an

...

SDorsey by L4 Transporter
  • 5417 Views
  • 5 replies
  • 1 Likes

GlobalProtect client behind a proxy, configuration help

I am trying to establish an ssl vpn connection using the globalprotect client, but the client is behind a proxy using a configuration script.  I have tried calling paloalto support but they said their client is not proxy aware.  Does anyone know of s

...

bigtone by L1 Bithead
  • 15380 Views
  • 6 replies
  • 0 Likes

Resolved! GlobalProtect Local LAN Printing

I have GlobalProtect running for machines when they are off the network.  Is there anything that I need to setup that would allow them to be able to print to their local LANs even though the agent is connected back to the FW?  I am currently testing

...

ccaruso by Not applicable
  • 9359 Views
  • 2 replies
  • 0 Likes

Resolved! How can I filter disabled rules in the 'policies'-tab

Hi,

I am quite new with Palo Alto and I try to filter disabled rules, so that I only see the enabled rules. I know that a lot of syntax can be found in the monitoring tab, but since enabled/disabled rules are not in it, I cannot find. It is on the Pal

...

Resolved! Globalprotect Portal same IP w/ management interface

Hello,

Before setting up globalprotect portal, I could access the management interface using the public IP externally. Once I configured globalprotect portal for VPN, the IP now directs you to globalprotect welcome login page. Which is normal, cause I

...

icap by Not applicable
  • 7261 Views
  • 5 replies
  • 0 Likes

Show Hard Drive information

For an audit, I need to know the Make/Model/Serial Number of the internal HDD.

I cant seem to locate the appropriate show command on a PAN device...any ideas?

Thanks much

GlobalProtect - how to edit the download page

Is it possible to edit the GlobalProtect download page?

On the page where users are prompted to download the 32bit, 64bit, or Mac version version of GP, I would like to add some instructions for the not so savvy user on which version to select and how

...

etnerual by L1 Bithead
  • 11970 Views
  • 14 replies
  • 1 Likes

Resolved! User authentication - Global Protect

HI.

I'm pre-staging a couple of PA2020's (active/passive), and am having an issue with getting authentication via AD working for Global Protect through Active Directory.

As far as I can tell, the LDAP configuration is correct - the firewall connects to

...

darren_g by L4 Transporter
  • 23371 Views
  • 12 replies
  • 0 Likes
Labels