General Topics
Showing results for 
Search instead for 
Did you mean: 
General Topics

Forum Posts

Happening in June: The Complete Zero Trust Network Security Event

Greetings everyone, Don't miss Palo Alto Networks' Complete Zero Trust Network Security event coming up in June. This event will cover the following points related to the newly unveiled Zero Trust Network Security: Secure access to the right applicat...

jdelio by Community Team Member
  • 1 replies

Resolved! GlobalProtect, Working from Home, Prisma Access and Covid-19

To all, Just wanted to post a message about the Hot Topic right now, which is Covid-19. With all of this going around, everybody's health and safely is the utmost concern. Keeping your hands clean, washing your hands (A LOT), using hand sanitizers, a...

jdelio by Community Team Member
  • 41 replies

Publish Custom ACC Tabs

I created a custom ACC tab with some filtered widgets and need to share it with some other users to monitor the network over the weekend. The users are not proficient with panorama, I basically want them to watch the tab I have created and call if X ...

Disable Weak cipher suite

Has anyone had success getting past a B on ssllabs for the globalprotect web portal # TLS 1.2 (suites in server-preferred order)TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) ECDH secp256r1 (eq. 3072 bits RSA) FS WEAK256TLS_DHE_RSA_WITH_AES_256_CBC_SHA ...


How to check VPN counters for a specifc dest IP?

how to check IPSEC VPN counters in CLI for a specific destination IP address?Peer is claiming the traffic is leaving their firewall but I don't see it on my pcaps and logs. How do I verify the traffic is actually passing through the VPN and hitting t...

file download slow

Hi,My speedtest shows 50 Mbps bandwidth remainig.But when downloading files i am getting very low speed . To isolate the problem bypassed PA, then speed was ok .Traffic shaping is enabled on PA.Web browsing is ok How to fix this problem Thanks

simsim by L4 Transporter
  • 5 replies

Panorama: cannot use in templates objects from DG

Dear Community, I have a Panorama with several firewalls in a device group under the share one.I have several templates and I cannot select any shared object from DG into any part of template configuration, for example adding an address object as an ...

Resolved! Need to Disable TLS 1.0 & 1.1 for port TCP-3978

Can someone suggest on how can we disable TLS 1.0 & 1.1 for port TCP-3978 Description: The remote service accepts connections encrypted using TLS 1.0. TLS 1.0 has a number of cryptographic design flaws. Modern implementations of TLS 1.0 mitigate thes...

Resolved! disable qos

Hi, I have the below configuration for qos , and there are policies also configured . If I want to disable for sometime , Just unchecking the checkbox under Enabled will help ? Or even after un checking the traffic will fall under class 4 ? Or do I n...

simsim by L4 Transporter
  • 1 replies

Resolved! 40031 Threat Exception

What I am wanting to know is if I can add a range of IP addresses to a vulnerability exception.This would be the entire 1-254 range, rather than 1 IP address at a time. I have already checked the links below and they talk about adding IP addresses on...

PA-5250 Power Supply Question

Do the power supplies within the PA-5250 load share? This is probably a real simple question but I have not found an answer within the documentation yet? Thanks!

B_Turner by L0 Member
  • 1 replies

Pre-logon for specific user only

My requirement is that some user should use Pre-logon and other should use User-logon. Currently all users are using only user-logon mode. Is it possible to use both mode in global protect, because we have to call client certificate profile on global...