This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Are wildcards also supportet in the UIA "exclude _user" List?

Hi, Version 7.1In the Agentless solution we have the nice Feature we can use to exclude Service-User from the User-ID by Username with "wildcards" completion.Can we enter in the exclude user List in the UIA also the user we want exclude with this wildcard Syntax?This would improve and simplify configuration very much.customer reportet this would...

rkuhn by • L0 Member
  • 1993 Views
  • 1 replies
  • 0 Likes

Geoblocking Exceptions

Is it possible to configure ip exceptions for gel block regions ? For example, could the public ip for a company be whitelisted within a geo blocked region ? Thanks. Mike

DekiM by • L0 Member
  • 4751 Views
  • 1 replies
  • 0 Likes

Resolved! Blocking Google Drive

Hi all,I'm trying to block access to Google Drive with not much success. The Applipedia has an entry called "google-drive" but this application definition does not seem to be present on my system (PA-2020 4.1.6 327-1497)I do have an application called "google-drive-web" so I have blocked this. I have seen a couple of denys for this application ...

DavePalo by • L4 Transporter
  • 12186 Views
  • 9 replies
  • 0 Likes

No ACC data shown

Hi Folks, Trying to run ACC report for the particular time between (13:30 - and 14:00) and not sure if that is the right output: Traffic logs show activities. Thx,Myky

ACC no data.PNG

Restart appweb in PanOS 7.0.x

Hi, CPU is high because of appweb process. We are running this command debug software restart <PID process appweb>but its not working in 7.0. How could we restart appweb proccess in PanOs 7 Thanks a lot.

Resolved! Self paced training no additional fee?

Hello folks, I am new to Palo Alto products and support. I've recently started working for a company that is a customer and trying to get training. My company added me with a support login, etc. I've signed up for the Firewall 7.1 (EDU 101) training.Does anyone know if there are additional charges or fees associated with registering for this t...

OMatlock by • L4 Transporter
  • 2944 Views
  • 2 replies
  • 0 Likes

Resolved! Threat Details

H Hi,What is Exempt profile here , Since severity is informational , Do we need to care about this ? What if we don't want alert or any action if the severity is informational ? Is it good practice just one rule in an antispyware profile ? Thanks

used in current.png
anti spyware profile.png
sib2017 by • L4 Transporter
  • 4940 Views
  • 5 replies
  • 0 Likes

Resolved! Feature Request: Change the ARP cache timeout value

Dear Team, We are facing an issue with wake-on lan after migrating the VLANs to paloalto.It has been observed that machines are not able to start by sending the magic packets after half an hour.We could observe that arp table cache is getting cleared after half an hour which resulted in this issue which is working perfectly if you move the gatew...

Issues and Observations Upgrading to PAN-OS 7.1.7

Hello Everyone,We are in the process of upgrading our firewalls to PAN-OS 7.1.7, and have come across a number of issues and oddities, and figuredit would be a good idea to create a community post to document them so that they might be a reference for others. Some items to notefollow.We don't have a large firewall environment, only about 10 devi...

PA lost mapping

hi, we are expecting problems with group-mapping. Yesterday we deleted a group from group-mapping profile and suddenly PA lost match in all the rest of groups in this group-mapping profile. we ran show user group-mapping state all and Number of groups was 0. So we created a new group-mapping adding all the groups and it started to work again. Wh...

VPN Client, Can't connect to internal zone?

Hi, Good day! I would like to ask what would be the problem, From outside user accessing via ssl vpn (VPN ZONE) below details are working.1. It can connect / has the ip pool assigned2. It can reach the internet using the assigned pool. Problem is from VPN Zone user can't reach the internal zone even though we already created a policy from vpnzon...

Pros and Cons of v-wire

I'm setting up a PAN firewall between our company and our business partners who have direct connections to our LAN. My idea was to use v-wire but some of our other network administrators say it would be too difficult to troubleshoot. What are the pros and cons of using v-wire versus just setting up a L3 interface?

svanarts by • L1 Bithead
  • 4625 Views
  • 2 replies
  • 0 Likes

Virtual router from firewall in series with physical router.

If I change our virtual wire setup to layer 3, have the IP addresses on both interfaces be local network IPs, and set a static route for 0.0.0.0 to point to the existing physical router on the WAN side of the virtual wire, will traffic (tagged and non-tagged) traffic pass through normally? My understanding is that this is 'cascading' the routers...

Netwerx by • L2 Linker
  • 5421 Views
  • 5 replies
  • 0 Likes

Commit failing

Running a VM-300 on PANOS-7.0.3 When attempt to make a commit (either through GUI or CLI), it hangs at 98%, and then fails. The commit failure outputs the following: Client sslvpn requesting last config in middle of commit/validate. Aborting current commit/validate.Not really sure where to start with this one, any advice is much appreciated. ...

mmclimans by • L3 Networker
  • 6238 Views
  • 1 replies
  • 0 Likes
  • 24404 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks