This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Opened session remains after threat triggered block-ip. WTF!

Hi, I've been testing the block-ip action in spyware DNS signatures. I was an RDP session before the threat triggered the block-ip action. Then, no more connections are allowed (what is OK), but the RDP session remains open. Is this a normal behaviour? I think the FW should reset all the sessions previosly established for the blocked IP, shouldn...

ACortes by • L2 Linker
  • 2839 Views
  • 1 replies
  • 0 Likes

http proxy -session end reason decoder.

All traffic via firewall works fine except http-proxy. PC makes connectio with http-proxy but the proxy session keeps on dropping. session end reason decoder. Is that normal for http-proxy app.

Resolved! Console conection using CISCO terminal server

Hi First of all i would like to say that im able to conect with serial cable to the Console Port with my laptop. The issue only occurs when i try to conect to the Console port via Cisco Terminal controller (TTY)At the begining i thought was a problem with the values that Palo Alto recomend for this kind of conection (see below) Bits per sec :...

Confused over EBL size limit

We have a 3020 running 7.0.8 and are experimenting with MineMeld. As soon as we get close to 5k IPs on the combined EBLs we get an error on a EBL refresh that it's been truncated as it's over the limit. Palo Alto's own KB suggests that on an entry level PA-200 there is a limit of 50k items on all EBLs combined. https://live.paloaltonetwork...

Resolved! Migrating old FW Config to new device

I have 2 PA-500's and have been planning to purchase a new device. Perect timing with the new PA-800's, fits my needs and then some. Is it possible to migrate my current configurations from the 500 to the 850? Network-ethernet-Radius-Users wtc as well as the policies and rules.

Resolved! Is the Intel Atom c2000 platform in any Palo Alto Products?

There is an advisory released by Intel (and probably Cisco) about the Intel Atom c2000 platform and a clock signal component failure that can brick devices using that platform. The Atom c2000 was marketed towards (among other uses) networking equipment. Does anyone know if Palo Alto used the Intel Atom c2000 platform in any of our devices? Than...

bshelton by • L0 Member
  • 4104 Views
  • 2 replies
  • 0 Likes

License Transfer

Hello, I am not sure if this is the right place to seek this type assistance. Is it possible to transfer subscriptions from PAN-3050 to VM-300 or VM-500? The client has a pair of PAN-3050 with TP, URL4 and Wildfire subscriptions which will be expired on April 30, 2017. They want to move to VM model as soon as possible. Thanks, Michael

MiZhang by • L0 Member
  • 3102 Views
  • 2 replies
  • 0 Likes

Resolved! Skype is not working with allow rule

Hi, We have a demand to allow skype for internal employees. However, we've created a security rule to allow the following applications: -skype-skype-probe-ssl/web-browsing Still skype couldn't connect with an error message "please check your internet connection and try again". So I've added *.skype.com/* in the URL filteration > still doesn't...

URL Reclassifications to Unknown in 20170207.20264

Hello, I was just wanting to see if anyone else has noticed that in URL DB 20170207.20264 many sites are being reclassified to Unknown? sites include www.maxtend.com.au fairfaxstatic.com.au (used for Australian Financial Review website)cdn.newsapi.com.au (where news.com.au keeps its image resources) We block uknowns by default so we have had man...

PhilH by • L2 Linker
  • 4258 Views
  • 5 replies
  • 0 Likes

Natting issue with new subnet.

I am applying destination nat. Natting public ip(untrust zone) to internal ip(trust zone). Public ip subnet is /28.When access public ip in the monitoring logs it shows me dst zone as Untrust whenit should show dst zone as Trust.I have policy in place and natting but its not hitting any policy and goes to expicit deny.

Cisco AnyConnect over IKEv2 killed by PAN-OS 8.0

Hi. I've been running PAN-OS 8.0 since release, and immediately got problems with Cisco AnyConnect over IKEv2. Even if the session is very much alive, PAN-OS 8.0 kills it of after a random amount of time, usually a couple of hours. If I change the AnyConnect policy to use SSL instead, everything runs fine. PAN-OS 8.0 recognizes AnyConnect over I...

GI-1 by • L1 Bithead
  • 3626 Views
  • 5 replies
  • 0 Likes
  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks