General Topics
Showing results for 
Search instead for 
Did you mean: 

The Enhanced LIVEcommunity Experience is finally here! Learn all about it.

Forum Posts

Registration now open - Interactive Event!

Hi everyone, If you haven’t already seen, registration is now open for our first interactive event all about the Best Practice Assessment (BPA) tool! You will be able to connect with subject matter experts, share best practices, and learn how this to...

jdelio by Community Team Member
  • 0 replies

Resolved! GlobalProtect, Working from Home, Prisma Access and Covid-19

To all, Just wanted to post a message about the Hot Topic right now, which is Covid-19. With all of this going around, everybody's health and safely is the utmost concern. Keeping your hands clean, washing your hands (A LOT), using hand sanitizers, a...

jdelio by Community Team Member
  • 45 replies

Resolved! Destination NAT of ESP and GRE

Hi all,I'm hoping somebody might be able to help with this unusual scenario please?I have been tasked with replacing an old linux based firewall with a PA-500 device.Initially the configuration of the PA-500 should just replicate what the current fir...

dyoung by L4 Transporter
  • 3 replies

DHCP not passing thru the 500 in wire mode

I am using a pa-500 as just a web proxy, I have clients sitting in different vlans connected to a ASA5512 that is acting as the router/FW and has DHCP Relay setup and was working fine. I added the PA500 between the ASA and the other network as a web ...

jtribble by Not applicable
  • 2 replies

Resolved! Cannot ping PAN from srx

Hi guys,I just got my hands on a new PAN. I have setup an srx100 behind the PA-500. The interface Ethernet 2/8 is in the trust zone, is setup as a L3 interface and has an IP of The SRX's IP is The SRX's next-hop address is the PAN...

How to configure a pa-500 with 2 inputs

I have a PA-500 running as a web proxy, The connection from the inside is a ASA-5512 (required), except that I have 2 5512's running in active-standby failover mode. How do I connect both 5512's into the PA500 so that if a failover happens the traffi...

jtribble by Not applicable
  • 10 replies

Zone Configuration

Firstly, apologies if there is already a thread on this.I have a pair of PA5020's running in HA mode with PAN-OS 6.0.5-h3When trying to create new interfaces I get the following errors Interface X has no zone configuration.Interface Y has no zone con...

JulianH by L1 Bithead
  • 1 replies

Kerberos SSO PAN-OS 7.0.1

Hello,at the moment I'm trying to set up a SSO Auth with the Admin Web Interface (and Captive Portal). I set it up like the documentation of PAN-OS 7.0 told me. I tried different Crypto types but all with the same error.1. Log in to the KDC and open ...

Migration Tool 3.0

Does anyone else have as many problems with this tool as I do? How can a company like Palo Alto Networks release a tool TO THE GENERAL PUBLIC, and not provide any semblance of support for it (aside from forums)?I am a Palo Alto Networks partner, and ...

MCPcAdmin by Not applicable
  • 2 replies

Resolved! How to allow Solarwinds IPAM port scan?

Hello,I have solarwinds with IP address manager and when the IPAM does a subnet scan the PAN alerts this as a threat and blocks the source ip address, which is the Solarwinds server, then I get alerts that everything on that subnet is down. How would...

Disk space alert

Hi everybodyIt is posible generate alerts or system logs when the partition sda2 or sda3 is soon to fill?Thank you for your help.Best regasds.

Claudia by L0 Member
  • 4 replies

Meru Integration with PANOS 6.1.5

HI Folks,We're trying integrate our Meru system with Palo Alto Networks. but can't find any documentation.As far as i can see we have two options:- Radius- Syslog feed straight to the PA device.Has anyone created the regex's / parsers for Meru and Sy...

Syslog-Messages only for some security rules?

Hi,I want to distribute our syslog-messages to different servers. Since we are using the Palo Alto system as Internet Security Gateway, a lot of traffic gets logged. But I only want to forward special services (systems more important than usual webtr...

Resolved! Remove syslog server profile via CLI

Hi all,I have a simple question and it is as follows:How do I remove a syslog server profile using the CLI?I would have thought it would be something like> delete shared server-profile 'syslog (server profile name)'but all I get in that command is th...

bmorris1 by L4 Transporter
  • 1 replies

PA-VM on ESXi - L2 Topology Design Questions

I'm looking to deploy a pair of PA-VM 200s running 7.x on a vSphere 5.5 cluster and would like a sanity check on the design.My client's network currently has one large VLAN that houses most of their servers. For the sake of this example, we'll say it...

bkeifer by L1 Bithead
  • 1 replies