This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

GP upgrade beyond 2.2.x

Hi, I'm running GlobalProtect 2.2.1 on PANOS 7.0.7. I'm preparing to upgrade to 2.3 (and beyond) to finally support some newer client devices. This caveat in the 2.3 release notes made me pause: If your GlobalProtect 2.2 or earlier release configuration uses a gateway server certificate that is not issued by a CA that is trusted by your endpoin...

gateway.png
blankprofile.png
portal.png
portalagent.png
MCmgt by • L2 Linker
  • 4495 Views
  • 6 replies
  • 0 Likes

Is Decryption needed without URL filtering?

Hello. We currenly have a Palo-5050 v7.18 doing firewalling and URL filtering.We have SSL decryption enabled. Because Palo does not support transparent authentication using Chromebooks and because we do not like the Palo URL reporting, we are looking at getting rid of the URL filtering part. Do we still need to have SSL decryption enabled for no...

dannon by • L3 Networker
  • 3112 Views
  • 2 replies
  • 0 Likes

Captive Portal & Identifying Guests?

Hello,We have a guest network with a constant rotation of mobile phone users. Is there a way to collect some information about who these devices belong to, such as forcing the user to enter their e-mail or company name? Perhaps using the Captive portal? We need some way of identifying unauthenticated users.

Configure DNS Sinkhole with multiple IPs

Hello, I found this instruction https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-DNS-Sinkhole/ta-p/58891 which is great but how do I create the Anti-spyware profile for multiple IPs? I'm hoping I don't have to create one profile for each IP. Thank you in advance.

rullyk by • L0 Member
  • 2892 Views
  • 2 replies
  • 0 Likes

Resolved! Flow basic

Will a debug flow flow basic show me if Im actually raching destination server? What I mean is if I have a server that is used for BAS_Filer mounts will it show me that Im not mounting to destiantion server that does the actaul mount? I know the pack captuer drop will show me but curious if flow basic will show it? I dont want ot set it up if ...

app-id for amazon video on ipad?

I am using a PA200 with 7.1.7 and app version 652. There is an app-id called amazon-instant-video. After I watched Grand tour on amazon video on ipad and air play on the apple tv. I want to see how many gigabytes did I just use, I can't find using that app-id. What am I missing? Thanks, E

Resolved! See full list of "Config Logs"

Hey guys, there is this "Config Logs" Widget on the dashboard of the Palo Alto 3020. But there are only a few entries. Is there a possibility to see more entries? Thanks for a reply!

MPI-AE by • L4 Transporter
  • 2307 Views
  • 1 replies
  • 0 Likes

Panorama licensing

I think that this is simple but I am just missing it. I am looking for what my license limitations for my Panorama are. I have looked on my support site and googled it but I seem to be unable to find it.Essentially I have a number of devices currently connected to my Panorama and I need to add more and I just want to make sure that my Panorama i...

tebert by • L1 Bithead
  • 2100 Views
  • 1 replies
  • 0 Likes

Overlapping Subnets and NAT

Hello, I have a new client we have a direct L3 link with. Our firewall has an existing directly connected interface on the 10.10.0.0/16 subnet. Our client also has a subnet of 10.10.0.0/16 which we need to get to. During my initial testing I decided just to access a /24 of the clients /16. I am natting the client subnet of 10.10.101.0/24 to 172....

Issues with ipsec traffic from PA3020 to Cisco 871.

I have a working tunnel between Netscreen and Cisco 871. I tried to move this from Netscreen to PA3020.The tunnel comes up. PA3020-local network-192.168.2.0/24 and remote-192.168.235.0/24.Traffic from 2.0(palo side) to 235.0(cisco side) network is fine. But from 235.0(cisco side) to 2.0(palo side) we have issuesOnly thing which works is ping. rd...

Resolved! Application Dependency question (l thought l knew it)

Heys, A bit confused now :0 My policy as below: So port 80 is allowed when l attempting to connect to the device over the web browser (Chrome) but after Palo actually identified that this is not a "panos-web-interface" app (based on tcp 3 way handshake and some data) didn't the response to the request. I understood that there is no other way t...

INBOUND.PNG
TR-LOG.PNG
DEP.PNG

What's new in MineMeld 0.9.36

Release Date: 2017-03-21 How to update: Updating MineMeld Nodes JSON Miner now supports Basic Auth via prototype (suggested by @Kimwii) TAXII Miner now supports subscription_id, client cert support has been improved, added support for LinkObjectType constructs and a starting support for AND Observable Composition (thanks @pjames_ucla) WebU...

lmori by • L7 Applicator
  • 7181 Views
  • 4 replies
  • 6 Likes

Resolved! DMZ to inside LAN

I know you need a security policy to go from dmz to Lan but do you need a nat statement. On all the Palo Alto documents that I have seen no nat rule is used. If I am wrong could some one send me a link. Thank you

Global Protect: Two preferred NIC listed

Windows 7 laptops with global protect client installed. When I plug my laptop into a wired(ethernet) connection, the wireless IP and the wired IP are showing up as preferred. If I remove global protect from these laptops the wireless IP goes away when I am on wired. We are starting to field help desk calls about slowness to all network resources...

image002.png
  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks