General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 2916 Views
  • 2 replies
  • 14 Likes

HA strange behaviour

Hi, we have a cluster Active/passive PA3050 in PanOS 7.0.9. Yesterday we realised that one of our firewalls was having a strange behaviour (event HA), and this morning this FW was in maintenance mode, i had to reinstall the image 7.0.9 and cluster is

...

HA.jpg

Zone Protection stats

I have recently setup/enabled some zone protection on one of my interfaces. I have set the values high since I have no way of knowing how much data is actually passing the interface and what threshold would trigger the dropping. Now that its running ...

murphyj by L2 Linker
  • 2754 Views
  • 2 replies
  • 0 Likes

Routing through same interface

HI

 

just ran into a very weird issue today.  A PA running version 7.1

 

The PA has IP 192.168.1.254 and it is the default gateway for the network. There is another network 192.168.2.0/24 reachable through 192.168.1.200. There is a route in the PA that s

...

myrdin by L2 Linker
  • 6092 Views
  • 14 replies
  • 0 Likes

Refresh FQDN failed

Hi guys,

 

I have a big problem.
My PA failed in refresh fqdn task and now the PA can't resolve Fqdn object.

My dns Setting are good and there is no drops between PA and DNS server.

 

Any advices?

 

Thank you!

Erez by L1 Bithead
  • 4458 Views
  • 6 replies
  • 0 Likes

Refresh FQDN failed

Hi guys,

 

I have a big problem.
My PA failed in refresh fqdn task and now the PA can't resolve Fqdn object.

My dns Setting are good and there is no drops between PA and DNS server.

 

Any advices?

 

Thank you!

Erez by L1 Bithead
  • 1433 Views
  • 1 replies
  • 0 Likes

Users randomly getting captive portal?

We're running a regular User-ID agent against our DCs.

 

99% of the time things are fine but we're getting calls from random people that every so often they're suddenly getting prompted to authentiate by the captive portal on the PAN and we cannot unde

...

Error accessing HTTPS web pages

After replacing an internet link, one of my internal networks stopped accessing the internet. After removing the decryption HTTP web pages returned to work, but the HTTPS web pages do not work. Anyone know what might be happening?

NAT sessions troubleshooting

Hi,

 

is there a way to troubleshoot the NAT sessions in real time?

 

i know i can use , for example:

 

show session all filter nat-rule NATRULE

 

to see if i am hitting the NAT rule, but i have to keep issuing the command to do that. Is there a similar thin

...

myrdin by L2 Linker
  • 1489 Views
  • 1 replies
  • 0 Likes

pa200 connect to dsl modem

I want to connect PA200 to a netcomm wireless modem. I haveseen config where dls modem and wireless router are separate. Need help with connecting PA200 to netcomm box.

Multi Critera Show Command

One problem I'm running into with the Palo cli is the ability to search the configuration for configuration matching on multiple criteria.  For instance, I'd like to display output showing all disabled security policies that include a description.

I c

...

Port forward does nt seem to work

HI

 

imagine this scenario:

 

Internet 1.1.1.1 PA 2.2.2.1  ----  2.2.2.2 ROUTER 3.3.3.0/24 network

 

I am forwarding all packets received to 1.1.1.1 https to 2.2.2.2 https which then re-nat to 3.3.3.0/24 host

 

With a stupid dlink 50$ router instead of the P

...

myrdin by L2 Linker
  • 1640 Views
  • 2 replies
  • 0 Likes

Palo Alto 200 Setup for home use

I have been given a PA200 to setup at home to get myself familiar with Palo Alto firewalls.  I have a cable modem and wireless router that will need to be connected to the PA200.  I have followed the instructions on this article to get it setup:

https

...

Hmtreviz by L1 Bithead
  • 6047 Views
  • 21 replies
  • 0 Likes

Resolved! Dynamic IP ISP NAT

I'm trying to figure out how to NAT a single server and port to my external IP address if the outside interface from the ISP is dynamic. How do I translate it if I don't have a destination address?

  • 24022 Posts
  • 99 Subscriptions
Top Solution Authors
Top Liked Authors