General Topics
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics

Forum Posts

Resolved! GlobalProtect, Working from Home, Prisma Access and Covid-19

To all, Just wanted to post a message about the Hot Topic right now, which is Covid-19. With all of this going around, everybody's health and safely is the utmost concern. Keeping your hands clean, washing your hands (A LOT), using hand sanitizers, a...

jdelio by Community Team Member
  • 17063 Views
  • 45 replies
  • 32 Likes

New User-ID agent 5.0.1-2

In User-ID Agent Release Notes is mentioned:Addressed Issues 5.0.1The following issues have been addressed in this release:• 46473 – Not able to install the terminal services agent version 5.0.0 on a Windows Server 2003 R2 system. Support has been ad...

Resolved! Panorama 5.0 with 4.1 devices

We are running Panorama 5.0, but still have some managed devices running 4.1. According to release notes, Panorama 5.0 should be backward compatible with 4.1 devices.How does Panorama 5.0 treat 4.1 devices when it comes to template configuration? I k...

torm by L4 Transporter
  • 976 Views
  • 4 replies
  • 0 Likes

Resolved! High rate on "flow_host_ha_encap_err"

Hi folks,By chance (okay, we were troubleshooting another issue) we found a potentially strange issue on our active PA-2050 (there is a secondary (HA passive) PA-2050 in place as well).1) We issue the following command on the prompt: show counter glo...

oschuler by L4 Transporter
  • 1764 Views
  • 5 replies
  • 0 Likes

How do you duplicate a device group

Mite seem like a simple question, but it seems you can only clone/duplicate the security rules within the same policy you cloned/copied it from. Im trying to create a new device group and use existing security rules from an existing device group with...

jessiea by Not applicable
  • 1384 Views
  • 5 replies
  • 0 Likes

Resolved! Internet facing interface dhcp-client inbound NAT

So,PAN 5.0.1 eth1/1 - Layer 3 / Internal network 10.0.0.1/24eth1/2 - Layer 3 / External network - DHCP assigned IP adress from ISP.Outbound NAT works. Inbound NAT i simply doesnt get to work.. :smileysad:Used the cli command test nat-policy-match fro...

criiser by Not applicable
  • 973 Views
  • 4 replies
  • 0 Likes

Routing to the same IP address via different tunnels.

routing the same IP within a VR via 2 different ipsec tunnels, I currently have a primary tunnel and a backup tunnel built for a customer. All traffic from this customer comes from the same PAT address to my firewall. I have 2 static routes going to ...

cmoore50 by Not applicable
  • 808 Views
  • 1 replies
  • 0 Likes

Resolved! updates.paloaltonetworks.com connectivity

hi all,we have been trying to test our networks connectivityto updates.paloaltonetworks.com and have been unsuccessful.we tried ping to updates but it fails and also traceroute it also fails.and when we tried from different networks all the coonectiv...

Apps & Threat update link not visible

Hello Guys,when I was about to update the latest Antivirus, Applications and Threats (Device>Dynamic Updates) of the box, I noticed that the update link for Applications and Threats are not visible. I tried to restart the box but still the link did n...

Captive Portal and speed limit for users

HelloNow I have 3 Mikrotics routers with WiFi and HotSpot service connected to dedicated VLAN on PA200. On the HotShot I have profile that limiting download/upload transfer to 500kb/s per user.Id like to change Mikrotic routers to AP mode and on PA20...

_slv_ by L4 Transporter
  • 715 Views
  • 3 replies
  • 0 Likes

Resolved! Dropped Sessions

I've a strange problem. My PA (5.0.1) randomly kills all sessions. This is causing me problems as all internet traffic times out during these issues. You can see from the show system statistics screen dump below that there is 0 packets and 0Kbps thro...

djrodb by L3 Networker
  • 777 Views
  • 1 replies
  • 0 Likes

Resolved! I need configuration help In vwire mode ,....

Hi All,..Kindly refer the fallowing topology, in which VLANs (ex:10 VLANs) are created and any traffic to internet is routed to the core firewall. In between core switch and firewall i have connected PaloAlto firewall in VWire mode and also have defi...

Gururaj by L4 Transporter
  • 796 Views
  • 2 replies
  • 0 Likes

SSH interception and server rekey

PA200 running 5.0.1-h1, SSH traffic is being intercepted to block tunneling which is working fine so far. The issue I'm seeing is the client (Putty) is dropping the session after 60 minutes with "Server's host key did not match the signature supplied...

rob72 by L1 Bithead
  • 553 Views
  • 1 replies
  • 0 Likes
Top Liked Authors