This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4115 Views
  • 0 replies
  • 0 Likes

Resolved! Panorama CLI command to add a tunnel interface to a zone

Trying to use the Panorama CLI to edit a template and add a tunnel interface, and also assign it to an existing zone in the same template. Does anyone know the CLI command to do this? I can add the tunnel interface and assign it to a virtual router like this: configure edit template myTemplate set config network interface tunnel units tunnel.100...

External Dynamic List Limit

Ref: PA-5020PAN-OS: 7.1.5 What are the limits for External Dynamic Lists?Number of ListsNumber of Entries/ListAre EDLs entries and lists counted in the total number for URL filtering? The documentation does not reference EDLs... https://www.paloaltonetworks.com/products/product-comparison.html Please advise,

Disk space & OS upgrades

I regularly update the OS to the next recommended version every other month, and I was wondering if there was anything that has to be done to clean up the hard drive so as not to run out of space?

jdprovine by • L4 Transporter
  • 10878 Views
  • 31 replies
  • 0 Likes

Chromebook / Chromium - security rules prior to login - network not available

Hi All, I'm a newbie on the world of Palo but can't find a way around this issue "yet" so was hoping for some advice. I have around 500 chrombooks and these are all tied into Google Directory services, they work fine etc etc. however i'm trying to have the devices work through the palo alto with user authentication for browsing which is tracka...

DNS aged-out, tcp-rst-from-client, and tcp-fin

I'm pretty new to Palo Alto products, and I just inherited one. I was having some small issues getting to a site (just a minute or two delay). When I went to the Monitor tab, and saw something that looked a little strange, but could be completely normal. There are a lot of these every second. Is it normal for a DNS to go to aged-out or tcp-...

DNSage-outEdit.png

SLR Report /AVR Report

Hello, after i geneate a "Stats Dump File" where i can upload this file to get the report?I cant find any tool or link do upload the file. Thanks

TCC by • L0 Member
  • 4022 Views
  • 2 replies
  • 0 Likes

Floating ip on a single firewall?

Hi all,Here's a network design issue we have run into. Our network consists of a single 5050 that services two core switch routers. Each core has a single connection from itself to the 5050. They are OSPF routed interfaces. Users can traverse either core device to reach the 5050 and the internet. We have a new application that is hosted on a...

vnt90 by • L2 Linker
  • 2504 Views
  • 2 replies
  • 0 Likes

Alternative for Checkpoint capsule

Hello, as security engineer i'm visiting many potential customers and some of them are Checkpoint oriented ones. The main obstacle to migrate to PaloAlto is in many cases - funcionality called Capsule - where employees can connect choosen service via simple mobile application without full vpn client connection.I was wondering if we can do simila...

High BW usage

Hi, We are using Palo 3020 in our setup & are struggling with high BW utilization during certain period of times in our network. We are suspecting few users bypassing the policies & misusing internet during these periods. Please advise if there is any report in Palo which can help us identify the user/s consuming maximum BW utilization d...

Resolved! Palo alto Interface Monitoring

Hi Team, Is there a way I can Monitor Palo Alto Interfaces directly using SLA. In case the Interface has no traffic, It will bring itself down. I have already searched two VR PBR stuff. I want to know if there is a way by which we can do tracking on interface. Regards,

yadsingh by • L2 Linker
  • 11815 Views
  • 7 replies
  • 0 Likes

Data Plane CPU Issue

Hello,In our company we have a PA-3050 and it's max sessions over 500.000. In a normal working day when PA reach 75.000 session data plane cpu rises %95-100 level. Here's the screenshot below.What will be our problem? Thanks.

Bugra by • Not applicable
  • 4436 Views
  • 2 replies
  • 1 Likes

Resolved! Captive Portal pop-ups for AD users

We have a huge problem with the captive portal.There is a connection between our PA500 and two Active Directory servers through the user-id agent.In a day our employees (who use AD credentials on there computers) get 3 - 5 pop-ups to fill in there credentials in the captive portal in there browser. We don't have a clue why and our partner can't ...

ZEBIT by • L3 Networker
  • 8065 Views
  • 9 replies
  • 0 Likes

native vpn client

Has anybody been able to successfully setup the native windows vpn client for Windows 8 and 10 to connect through a palo alto firewall

jdprovine by • L4 Transporter
  • 5334 Views
  • 3 replies
  • 1 Likes

Resolved! GlobalProtect 3.0.1-10 on Windows 7 gradually consumes all the memory

Hi, I'm using GlobalProtect 3.0.1-10 as the VPN client on Windows 7, and this Win7 system is running inside the VirtualBox on my Ubuntu 14.04. I have observed several times that after I connect the VPN and keep it running for several days, the system memory will be consumed by GlobalProtect completely, which can be seen from the Task Manager "Pe...

Task Manager - Performance - Initial.png
Task Manager - Performance - Final.png
Task Manager - Processes - Initial.png
Task Manager - Processes - Final.png
yaobin by • L1 Bithead
  • 6292 Views
  • 6 replies
  • 0 Likes
  • 24333 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks