This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Natting issue with new subnet.

I am applying destination nat. Natting public ip(untrust zone) to internal ip(trust zone). Public ip subnet is /28.When access public ip in the monitoring logs it shows me dst zone as Untrust whenit should show dst zone as Trust.I have policy in place and natting but its not hitting any policy and goes to expicit deny.

Cisco AnyConnect over IKEv2 killed by PAN-OS 8.0

Hi. I've been running PAN-OS 8.0 since release, and immediately got problems with Cisco AnyConnect over IKEv2. Even if the session is very much alive, PAN-OS 8.0 kills it of after a random amount of time, usually a couple of hours. If I change the AnyConnect policy to use SSL instead, everything runs fine. PAN-OS 8.0 recognizes AnyConnect over I...

GI-1 by • L1 Bithead
  • 3670 Views
  • 5 replies
  • 0 Likes

Light blue vs dark blue IP's

I have noticed that in the policies that some IP addresses show a dark blue and underline all the time and then there ar IP's that are a lighter blue and the underline only appears when I have my cursor over the IP. anyone else seeing this and is it significant?

jdprovine by • L4 Transporter
  • 6703 Views
  • 12 replies
  • 0 Likes

Multicast questions

Hi, I am not famliar with Multicast at all, please forgive my ignorance. I need to replace Fortigate firewalls with Palo Alto devices and the Fortigates are currently running Multicast. There are no "groups" defined on the fortigate, and if I run "get router info multicast pim sparse-mode table" on the fortigate I can see many groups listed. Can...

Resolved! Panorama CLI adding address objects to a specific firewall

We use Panorama for all of our firewall changes. We have 22 sets of HA firewalls. I am trying to load a long list of IP addresses into only one firewall (so these are not "shared" addresses). I know how to add them to the templates but I wan to add them to the level below that, the actual firewall. Any help would be appreciated!! Mike

Resolved! SSL Decryption issue (wrong certificate)

Hi All, Having SSL Decryption issue with one of the websites at the moment (https://wiki.freeradius.org/Home)So testing without decryption and checking certs chain: Can see root CA on Palo: So all looks good. Implementing SSL Decryption (test version only) with two certs generated on PA one for forward trust another is for forward untrust: Do...

PA1.PNG
PA2.PNG
CERTS.PNG
BBC.PNG

Resolved! Feed / data control

Use Case: Ofice 365 Access Control What happens if MineMeld deletes all the IPs from a feed, and the firewall sees there are no more IP’s from that feed. Will the traffic be blocked? What happens on the firewall if there is no data from a feed where there was data from the last time it pulled? Will it delete the local cached copy of the data a...

General question to software updates of Palo Alto Firewalls

Hey guys, I have two PA-3020 firewalls with 7.0.7 installed. I want to upgrade to a version of 7.1 Since I have never made an update before, I'm a bit worried about it. How do you perform updates? Can I just pick the latest version (currently 7.1.7) and install it? Or is there like in Cisco a page showing a suggested version? Or can I install ev...

MPI-AE by • L4 Transporter
  • 4436 Views
  • 8 replies
  • 0 Likes

Resolved! IKE Gateway OK button is greyed out?

I'm trying to add an IKE Gateway on a PA-500 running 7.1.5.After clicking the ADD button and filling out all the info on General and Advanced Options tab, the OK button is greyed out.I have a few IKE Gateways set up already and they are working fine. If I click any of them, I am able to edit them and click OK. I'm totally confused, and hoping so...

jgruman by • L0 Member
  • 4895 Views
  • 3 replies
  • 0 Likes

EXE file type blocked

Hi, I've one client complaining about exe file type get block without any file blocking profile configured.I made sure we remove the whole security profiles from the security rule configured but still got the same.I got File Transfer Blocked exception page! Other types of file sometimes is working and sometimes is blocked but exe specifically is...

PA-3050 CPU dataplane issue

We have a PA-3050 on softwarre 7.0.8 and are struggling with CPU dataplase issues during normal business hours. 80 % load is shown by dashboard in webgui. Session count is approx. 80 000 when issue occurs. show system resources follow - only says that logrcvr uses 5% and nothing special is elsewhere noticed.Running command show system stati...

TorC by • L1 Bithead
  • 7022 Views
  • 6 replies
  • 0 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks