This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

help with NAT

hello im wondering if anyone can help a PAFW newbie with configuring some nat that i am trying to pass through. i dont know how my security & nat rules should look but this is what i have configured: security rule: source zone (untrust) source address (any) destination zone (untrust) destination 99.99.99.13 Acceptnat rule: source zone (untr...

bwfreas by • L1 Bithead
  • 3062 Views
  • 3 replies
  • 0 Likes

Resolved! IPsec tunnel questions?

Hi folks, We have several IPsec VPN tunnels for various remote firewalls connections. One of them is changing their firewall hardware to something else next week. Sonic firewall, I believe. I've been told that they are configuring the new replacement hardware with the same settings as before including same peer IP address.NOTE: I will backup ...

OMatlock by • L4 Transporter
  • 4358 Views
  • 5 replies
  • 0 Likes

Resolved! moving away from a disconnected panorama

Hi All,we recently got disconnected from the parent company and I ended up with all the network access and policies that I can't edit, and i'm afraid to touch the disconnect from panorma without asking first... If I disconnected, will the policies becames local ann I can edit them? or what's the best scenario? I'm database developer that inheri...

JasonY by • L1 Bithead
  • 5992 Views
  • 6 replies
  • 0 Likes

Resolved! 7.0.8 to 7.1.8 upgrade - H.323 not working

Dear All, We have recently upgraded as the title suggests, and since upgrading our Polycom Group series video conference units are not working correctly on H.323 protocol. When we connect to either a public video bridge or direct to another Polycom device, we are unable to hear the caller ont he conference. This was previously working in 7.0.8...

Threat and general reports

I am new to the Palo Alto and I'd like to generate threat and monitoring reports. Are there any webcasts on generating custom reports? Thanks

jac101 by • L2 Linker
  • 2824 Views
  • 2 replies
  • 0 Likes

PAN-OS 8.0 Decryption Issue with Firefox and Chrome

After uprading my lab to pan-os 8.0 The forward Decryption failed when using Firefox and Chrome.IE 11 en Edge still works. For example when i go to www.google.com, Chrome displays: www.google.com uses an unsupported protocol. ERR_SSL_VERSION_OR_CIPHER_MISMATCH Firefox: Advanced info: SSL_ERROR_NO_CYPHER_OVERLAP In ...

password recovery

Hi, I pressed "M" while booting and i am not getting the console after that. Kindly someone help me to resolve this issue. Regards Suresh Kumar8197826493

Resolved! Custom Application ports secure at Layer 7?

Hi folks, We have created an Application override and custom Application for SIP and RTP traffic. We also have Security/NAT rules that allow only this application (ports 5060, 5061, and 6000-8000) access to an internal VM with public IP directly. As I am still learning PA, wanted to ask. Since we are using an Application (and override) that we...

SIP1.jpg
SIP2.jpg
pasbcrule.jpg
PAnatrule.jpg
OMatlock by • L4 Transporter
  • 8621 Views
  • 12 replies
  • 0 Likes

Resolved! Feature Request

Can we get a widget that shows status and performance metrics of user and ipsec vpns? Status is hard to find (and not on one pane), and there are no performance metrics at all.

Unable to connect to https://login.microsoftonline.com

hiThe whole company behind PAN firewall is unable to connect to https://login.microsoftonline.com.no blocked page, just "sign in to your account" web portal but no place to login. Firewall does not show any blocked/dropped connection to this URL.I create a brand new test rule, put on top of the rule sets but no luck. Any suggestions/idea appreci...

SSL decryption and browsers behaviours

Hello, We are planning to perform SSL Decryption for overall Web Traffic (we are a public organization of around 5000 users). We have started several tests by implementing SSL Decryption Best practice like not decrypting "Financial Services" and "Health" categories. However we are facing common issues with browsers that often states that connexi...

ie_manor_ssl_no.JPG
ie_manor_ssl_yes.JPG
ie_migros_ssl_no.JPG
ie_migros_ssl_yes.JPG

Resolved! Wildfire & ZIP files

When I have the PE type selected for Wildfire are ZIP files sent to be scanned if they contain EXE files? I thought they were, but figured I would ask.

nthen by • L3 Networker
  • 11010 Views
  • 9 replies
  • 0 Likes

Resolved! Security Policy Exception

Has Palo Alto looked into the capability for security policies to be built using an exception based logic. For example: Src: 10.0.0.0/8 (except) 10.100.0.0/24 Dst: ** App: ** etc.... This would then allow all 10. traffic except for the 10.100.0.0/24 subnet This is a function available in Checkpoint and some other platforms that has been very hel...

  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks