General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Discussions

PA3020 fans always running at 100% speed?

First thing I noticed when I plugged this in was that it's very loud. Normally a device spins down the fans when it's at a cool temperature (which is pretty much all servers and appliances from the last 10 years).

So is there any way to change the fan

...

Maxstr by L3 Networker
  • 7928 Views
  • 9 replies
  • 0 Likes

Packet Descriptors spike

Hi All,

I've been collecting and plotting CPU, Session, Packets Descriptors, Packets Per Second, as well as some other metrics. Once in a while I see a spike on the Packet Descriptor graph.

According to KB article How to Interpret: show running resourc

...

abraun by L1 Bithead
  • 13897 Views
  • 7 replies
  • 0 Likes

6.1.3 update issue: Threat database handler failed

Hey all-

I tried updating a test box to 6.1.3 and encountered the error in the title. Per other threads, I tried manually downloading the latest content version and installing but it resulted in an error during install.

Has anyone else encountered thi

...

SDorsey by L4 Transporter
  • 4875 Views
  • 3 replies
  • 0 Likes

Kerberos SSO PAN-OS 7.0.1

Hello,

at the moment I'm trying to set up a SSO Auth with the Admin Web Interface (and Captive Portal). I set it up like the documentation of PAN-OS 7.0 told me. I tried different Crypto types but all with the same error.

1. Log in to the KDC and open

...

Why viruses/spywares passes PA device unblocked?

Hello

Until now I trusted that default configuration for most purposes is OK.

Today I discovered that few viruses passes in smtp traffic to my email server. I'm curious why?

when in web-broswing traffic the same type of aplication "virus" was denied.

My

...

_slv_ by L4 Transporter
  • 9610 Views
  • 12 replies
  • 0 Likes

IP Directed Broadcast

Hello,

We want to use wake on LAN in a vlan attached to a layer3 interface on the firewall. The magic packets are sent from a server outside the vlan to the broadcast address. I allowed WOL-packets in the firewall policies, and I see them in the logs,

...

Resolved! troubleshooting SSL decryption

We've been using SSL decryption for a while now.

Where for the most websites, this is not an issue, once in a while a user complains that certain https website doesn't load at all. Browser just keeps loading indefinitely.

We can't find a reason in the

...

dieter_b by L4 Transporter
  • 11160 Views
  • 7 replies
  • 0 Likes

url_filtering problem

HI all,

We have a cluster of 2xPA3050, for protection to untrusted zone. Last week we enabled the trial license for url_filtering. Since that moment we have met a special problem. We use a citrix application over ssl in the cloud. This citrix server i

...

Packet drops in LAN interface,..

Hi All,

For a 5 minutes we are unable to access internet ( even not able to ping next hop router), We observed that there is a packet drops in PaloAlto LAN interface, below snap shows the same. Can any body give the reason for this packet drops?

Please

...

Gururaj by L4 Transporter
  • 10455 Views
  • 10 replies
  • 0 Likes

Resolved! NAT Issue

Hi Friends,

I have 2 server hosted in lan zone and one public ip . i have configure the NAT for 1 server from outside from port 80 and its working fine. but i want access the other server from lan with public ip from port 80 but its not working showin

...

Satish by L4 Transporter
  • 6106 Views
  • 3 replies
  • 0 Likes

Resolved! Application incomplete

Hi,

Why Palo Alto is detecting sometimes the application like SSL and sometimes like incomplete??????

if the connection has 134bytes is not detected, but with more than 134b is detected..........

SOC_CSG by L4 Transporter
  • 26888 Views
  • 9 replies
  • 0 Likes

LAB PA-200 fails 7.0.1 upgrade

I have a Lab PA-200 that I have been upgrading to the latest version of PAN OS for testing.

I have been uploading the OS file and upgrading for a while.

The 7.0 file worked fine. After the alert about 7.0. I attempted to upgrade to 7.0.1.

No joy. In Fir

...

markwoll by L1 Bithead
  • 9873 Views
  • 21 replies
  • 0 Likes

VM-Series firewall on VirtualBox

Hi,

I know that VM-Series firewall requires VMware ESXi running vSphere 4.1 or 5.0.

But I don't have VMware right now on my laptop and only I have is Oracle VirtualBox 4.2.6 - just for tests and presentations (not for commercial purpose)

On VirtualBox I

...

mgmtsrvr - virtual memory limit exceeded, restarting

Has anyone seen this before?  I'm looking for feedback on whether or not this is directly related to the VM Panorama sits on?  This was the decription of an alert I received at 12:30EST today.  Sure enough, Pano was rebooting.  Any information provid

...

ejm by Not applicable
  • 7104 Views
  • 4 replies
  • 0 Likes

Routing Between Virtual Routers in Same Firewall

I have two Virtual routers in same Firewall I wanted to allow traffic between the Virtual routers, I configured  rules to allow traffic from Trusted L3 zone in VR1 to Trusted zone in VR2 and vice-verse and put them at the top of the rules and also I

...

Jama by Not applicable
  • 12911 Views
  • 8 replies
  • 0 Likes
Labels