This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Removing interfaces off a VM-series HA pair

As per title, functionally, this is easy to do.1. Shut VM down.2. Remove interfaces from virt solution configuration for the VM3. Power up. 4. All is well. But, in a PAN VM-series HA pair... I'm worried that I might have to shut both down AT THE SAME TIME. To remove the interfaces symmetrically.. off both. And then power both back up again. To...

mpgioia by • L3 Networker
  • 2286 Views
  • 1 replies
  • 0 Likes

Import from xml of a 2 vsys system

I have an xml config export from a PoC system that had 2 vsys configured. Is there a way to peel out one of the vsys configurations from the xml and import vsys1 only?

RFalconer by • L3 Networker
  • 2451 Views
  • 1 replies
  • 0 Likes

url-filtering

Hi,In url filtering adult-and-pornography blocked . But la-xxx.com can accesiblexxx.com not blocked 1)test url la-xxx.comla-xxx.com adult-and-pornography (Dynamic db)2)test url xxx.comxxx.com adult-and-pornography (Base db)other info----------show url-cloud statusThis command requires the PAN-DB URL filtering database.url filtering db5076Thanks

sib2017 by • L4 Transporter
  • 5540 Views
  • 8 replies
  • 0 Likes

Two L3 interfaces on One Zone

Hi, in the setup of the above diagram , I need to run OSPF on Paloalto between two Core-SWs, so I have to create two L3 interfaces Point to Point with the two SWs. the two core-SW is considered as inside for me , so from the prespective of routing it is okay.but the issue on the polices, I have to create the polices duoble between two inside z...

Question.jpg

Resolved! Create threat signature

Hi Guys, I need to know if I can create a threat signature in case I've only the malware hash. Is it possible to do on PA? If not, Is there any other way I can block malwares based on hashes only? Regards,Sharief

Troubleshooting ipsec tunnel setup.

I have setup ipsec between PA200 and cisco device. When trying to bring tunnel up not even able to establish phase1.Getting following errors in logs. I have keyed in pre-shared key again on both the sides. ikev2-nego-child-start:'IKEv2 child SA negotiation is started as initiator,non-rekeyike-generic-event- received notify type AUTHENTICATION_FA...

Globalprotect - User-ID - missing domain prefix - group mapping not working

Hi I have been trying to get User-id / Group mapping to work in one of our installations but without any luckTried both Radius and LDAP authentication.I do see User-ID / IP mapping - but the domain prefix is missing."10.253.250.1 vsys1 GP sensagummi 2591361 2591361" I do as well see User-ID / Group mapping and the domain prefix is present there ...

Resolved! PA drops traffic apparently without NO REASON

Hi All, I have PA 2050 with panOS version --> 7.0.9I have two rules:Rule 4 --> Permit for svc-casse application as (ssl, ms-updated ecc)Rule 5 --> Cleanup for svc-casse That's the situation check :RULESLOG Really really strange behavior I never seen this before.Rule 4 permit ssl and ms-update but it's ignored.. Another crazy thing? Some...

Rule_INVOLVED.JPG
LOG_DROP_Without_no_reason.JPG
SSL_Allow_random.JPG

Resolved! Message of the day adn Embedded Message for cotent updates

How does one go about getting contents updates as part of message fo the day running 7.1.6 according to below in Red from PA the content and software messages have to be embedded and then I should be able to log in and veiw messege of the day and see ant content or softwared update messages If you or another administrator configured a message...

PA drops traffic apparently without NO REASON

Hi All, I have PA 2050 with panOS version --> 7.0.9I have two rules:Rule 4 --> Permit for svc-casse application as (ssl, ms-updated ecc)Rule 5 --> Cleanup for svc-casse That's the situation check :RULESLOG Really really strange behavior I never seen this before.Rule 4 permit ssl and ms-update but it's ignored.. Another crazy thing? Some...

Rule_INVOLVED.JPG
LOG_DROP_Without_no_reason.JPG
SSL_Allow_random.JPG

Info Wildefire analysis and wildefire in antivirus profile

Hai allafter the upgrade to new version of pan os(7.0.13) i found some difference in security profile. Can you help me to understand the difference between: - Security Profile > Antivirus > wildefire action- Security Profile > Wildefire Analysis is Antivirus profile to block malicious file knew in the dat file and wildefire for zero day...

Resolved! PA5050 | temperature sensor | how to disable false alarm

Hi all, could it be that somebody know:we have a problem with a temperature sensor on our PA5050 deviceS1 Temperature @ 10G Phys [U171] False 17.40 5.00 60.00Time to time we see temperature 0!!! [screen 1] and it triggers a temperature alarm event and increases FAN speeds to 6-7k for 1min and than alarm is gone. We have thous...

pa5050temp.png
IHEP by • L1 Bithead
  • 7875 Views
  • 8 replies
  • 0 Likes

Application Filtering and Basic Setup

Hi All, I would like to ask the FF. 1. I want to use Application filtering but permits web browsing. - Enabled App filtering, Permit Web-browsing, SSL and DNS but I can't browse and launch any website. Any idea how to permit only browsing on app level? What should i allow? 2. In future is it hard or does it affect you in production when ...

  • 24403 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks