This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! wildcard bitmasks

Will pan os support use of wildcard bitmasks in address objects in future as cisco ASA does.For example aal devices in in the 10.6.0.0/16 supernet ending on .1210.6.0.12 0.0.255.0. This will eliminatie a lot of entires in object address groups.

Resolved! Global protect VPN disconnecting multiple times

Hi,Im facing issue with connecting to GP VPN, unfortunatly im the one who is having issue.VPN works fine on other cmputer but having issue with my computerbelow are the error msg i got during the VPN disconnect time (T10836) 04/11/17 18:51:28:501 Debug( 980): VPN handle dhcp packet(T10516) 04/11/17 18:51:46:676 Debug(1189): SSL3 alert write:fata...

Resolved! Search rules based on Source Zone

Hi, If anyone can help me. Is there a way that i could filter all Security rules just based on the source Zone ? For example just show me Security Rules from Source Zone x ( and i need to see what rule corespondes to that zone) Thanks Alban

Resolved! TAP:Specifying external interface

I'm working on a home lab, have an ESXi server with some UTM VMs running and I'd like to give them something interesting to look at. Following the online documentation (both in support and this: https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-a-Palo-Alto-Networks-Device-for-Tap-Mode/ta-p/59438) I can't seem to get ...

Resolved! Issue allowing port 2463

I'm trying to allow port 2463 (lsi-raid-management) traffic from my untrust zone to one of my vlan zones. I have added it to an application group and added a policy for traffic between my untrust zone and vlan zone with that application group. Every other application in the application group is allowed to pass but 2463 is still being blocked by ...

tglear by • L1 Bithead
  • 7764 Views
  • 12 replies
  • 0 Likes

Resolved! Google Play Store Problem

Dear Members,Am here a new member, please I wish to know how to block only the google play store.If I try to block only that with google base application, other traffics also blocked.Let me know how to block only google play store.Regards,RKV

Resolved! Multiple Response Pages

Does anyone know of a way to make multiple response pages for different user groups. Specifically the URL Filtering and Category Match Block Page? Essentially what I'm trying to do is create two different responses; one that will tell you your request was blocked because of policy, and the other one will simply block the traffic and display a b...

BPry by • Cyber Elite
  • 10843 Views
  • 8 replies
  • 0 Likes

palo alto firewall insufficent data in traffic Logs

I see lots of enteires in regards to Insufficient-Data but how does one go by troublshooting them? I understand the definition btu is Packet capture the only way to get reason for it? Considering I have a any port any service rule I wouldnt expect too see it

Resolved! How to check drops on PA-500 due to performance limits

Hello! Is there way to check session/packet drops on PA-500 due to performance limitaions? Scenaro:There is PA-500 appliance, that provide internet access to +2000 users with agentless integration with AD. Management CPU average load is about 70-100 %Data plane CPU: 40-60%Session utilization 40-60% Main internet-access rule has Threat-Prevention...

SSL Decrypt Problem with Chrome

Hello all, We are having some problems with SSL Decrypt with Chrome. When we try to connect to some pages appears certificate error that I attached. I have PanOS 7.1.8 and only occurred this with Chrome. Know somebody how I can fix this problem ? Kind Regards

error.png
SOC_CSG by • L4 Transporter
  • 6026 Views
  • 5 replies
  • 0 Likes

Resolved! PDF Summary Reports - How to increase the "TOP" hits in the TOP Denied Sources

Hello Experts,I have a Daily Summary Reports where i have the output for almost 16 sources (meaning daily summary data on Top Connection, Top Destination countries, etc. etc). I noticed that it only displayes the "TOP 5", is there a way i can increase this? Perhaps even just for a single report (Top Denied Sources). My objective is to see the to...

Resolved! Expected behaviour for Null, FIN and XMAS scans

Running through a few very basics tests to prove Zone Protection etc with a customer, what is the expected default behaviour for reconaissance scans such as Null, FIN and XMAS scans? Currently I can get the following nmap commands to run without issue and no logs beyond ping or icmp.nmap -sXnmap -sFnmap -sN What would be the appropriate measure ...

Resolved! GP Server Certificate Verification Failed

Hey guys, I wanted to upgrade the Global Protect Version. Currently, I have version 2.3.4 in use an everything works fine. Now I have a new mac with 10.12 and therefore I need version 3.1.1 of GP. So I activated it on the firewall, installed it on the mac 10.12 and now there's is an error: "Server Certificate Verification Failed" I'm not able to...

MPI-AE by • L4 Transporter
  • 24275 Views
  • 14 replies
  • 0 Likes
  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks