General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Discussions

PA Ipsec Tunnel

Hi there,

We have a particular setup with our remote sites that I am currently having an issue with.

On sites we use pfsense firewalls that have Ipsec tunnels setup to connect back to the PA system here at our main offices. This has all been fine up un

...

JRussell by L3 Networker
  • 1343 Views
  • 0 replies
  • 0 Likes

Resolved! How to setup SSO on a Microsoft Surface PRO

Hi,

We're using GlobalProtect client on many workstations. GP Agent is configured in SSO mode. This work flawlessly on Windows XP, 7, and some Windows 8 Pro PCs and tablets.

I just got a brand new Microsoft Surface Pro running Windows 8 Pro 64 bits. Fo

...

PatrickD by L1 Bithead
  • 2961 Views
  • 4 replies
  • 0 Likes

Resolved! Monitoring VPN tunnel by email

Hi all,

Is there an effective way to send an email alert if a VPN tunnel is down? I checked several places in the web admin UI but could not find a good way to configure it.

Thanks!


PM

EDNS0 Packet blocked

Hi,

We have internal DNS’s that send query EDNS packets and
those packets apparently are blocked by our Firewall (PA-3050 IOS Version
5.0.2)

I didn’t find any doc or discussion here about this issue

Could someone help me to allow those packets pass throug

...

BSadozai by L2 Linker
  • 5417 Views
  • 2 replies
  • 0 Likes

Troubleshooting HA Sync

Hi All,

I've a HA Active/Active pair of PA-3020's managed via Panorama.

All was well until I had to replace one of the pair, I brought the new device into Panorama, added it to the correct group/templates and then finished the device config (IP address

...

pcook by L1 Bithead
  • 8810 Views
  • 7 replies
  • 0 Likes

DNS service route doesn't work ?

Hi,

I am having troubles configuring dns service route for DNS.

DNS servers are behind tagged internal interface of PA-2050 device.

I was able to configure that for syslog and it sends all the traffic PA outbound to the server.

I was trying to do the sam

...

USER ID MAPPING

What will give you better results, User-ID Agents installed on domain controllers, or Server Monitoring from the firewall (agentless)? 

almay by L2 Linker
  • 3528 Views
  • 7 replies
  • 0 Likes

IPv6 slowness

We have a PA5020 and recently enabled IPv6 throughout our network. We have been experiencing extremely slow internet connections and timeouts until we removed IPv6 from the inside and outside PA box Ethernet interfaces. Our ISP is Comcast and we have

...

rlawsha by L1 Bithead
  • 1492 Views
  • 0 replies
  • 0 Likes

QoS and VLAN

Hi,

is it possible to assign a QoS Profile to a L3 Subinterface? In my configuration on 5.0.2 there is the possibility only to physical interfaces.

Best regards,

Robert

Labels