General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 320 Views
  • 0 replies
  • 0 Likes

Resolved! ACC report on Sunday

Hi Guys,

 

ACC issue. Don't know what could be the reason for the URL block report to show some activities when nobody was using a network on Sunday. NTP? And also question to why all users got 2 digits in the end of their username, Is it normal?

 

Thx,

M

...

Latimer issue.PNG

BlackNurse Testing Causes issues on Egress Firewall

FYI It doesn't appear to require an attack to be an IP address bound to the PA.

 

It also appears that testing a remote firewall while egressing through a PA firewall causes your local firewall to experience DOS effects. It is not just inbound to an IP

...

bspilde by L4 Transporter
  • 2697 Views
  • 3 replies
  • 0 Likes

Resolved! TLS secured SMTP inbound inspection?

Hi,

I've recently had a client who's PAN appliance failed to pick up a Zero-Day piece of malware that found it's way into their network via email.

We have wildfire configured correctly and it transpires they are using opportunistic TLS on their mail re

...

Dpeters1 by L2 Linker
  • 15324 Views
  • 11 replies
  • 0 Likes

Resolved! show routing resource

When using  show routing resource command. Why is there a overlimit value when we are under the 2500 limit count

 

 

LOBAL ROUTING RESOURCE USAGE:
==========
All Routes (total): 1088 (limit 2500)
All IPv4 Routes (total): 1088 (limit 2500) (overlimit counts

...

BlackNurse Denial of Service Attack

http://www.netresec.com/?page=Blog&month=2016-11&post=BlackNurse-Denial-of-Service-Attack

Has anyone here tested the effect of this on any PAN-devices ?

http://blacknurse.dk says:
LIST OF REPORTED AFFECTED PRODUCTS :
Cisco ASA 5515, 5525 (default setting

...

Dulle by L2 Linker
  • 4115 Views
  • 4 replies
  • 0 Likes

Resolved! Different subnets on the same interface

Hi,

 

my ISP has assigned me with a /30 for the p2p connection and it is routing a /24 public subnet towards that /30. Meaning the WAN interface in the Palo will have to respond to many different ips on two different subnets. I haven't found any Kb tha

...

myrdin by L2 Linker
  • 10648 Views
  • 10 replies
  • 0 Likes

Block page for security policy matches

Is there a way to return a block page to users when their connection is blocked not by the URL-filter but by a security policy?

 

We have a security policy that blocks all outbound traffic to a list of foreign countries.  The problem is when users atte

...

fmurray by L1 Bithead
  • 1798 Views
  • 1 replies
  • 0 Likes

how to install PANOS in new HD

Hello Community,

 

I have my PA2020 with issues. The device is booting from PanOS Bootloader.

 

What is the proceess to upload and install again the PANOS?.

 

PA2020.JPG
Apadilla by L3 Networker
  • 3131 Views
  • 5 replies
  • 0 Likes

Is there any reason that tunnel interface will go down

Hi There,

 

I configured two IPSEC VPN on PA, as PA has two ISP connectivity. Configured a PBF to forward the traffic through primary tunnel interface and enabled monitoring to monitor trust interface of remote PA. A route was configured to forward the

...

fozail by L3 Networker
  • 4872 Views
  • 7 replies
  • 0 Likes

Resolved! Snapchat

Has anyone had success blocking Snapchat? We have a rule for blocking "bad" apps and Snapchat is presently in this list. In testing I can see that a reset-both occurs when the firewall detects the traffic and the application is recognized as Snapchat

...

rmiller1 by L1 Bithead
  • 13253 Views
  • 12 replies
  • 0 Likes

Resolved! Miner polling interval ?

I can't find information about polling interval in Dev guide or 'How to Write a Simple Miner'. What's the minimum, 1s, 60s ? Can it be cron like with day of the weeks or months etc (but less than 60s) ? 

niuk by L3 Networker
  • 5264 Views
  • 2 replies
  • 0 Likes
  • 23824 Posts
  • 112 Subscriptions
Top Liked Authors
Labels