General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Problem after upgrade from 7.0.13 to 7.1 pa-5000

Hello alli have a big problem with the device after upgrading from pan os 7.0.13 to 7.1. The system after reboot dosn't fully boot up.The web gui starts but doesn't boot the ha configuration and interfaces. If i try to commit it says that it is not possible because it is locked from the auto-commit but if i digit show jobs all i see nothing.If i...

Resolved! How to see real memory allocated in firewalls

Hello community, Currently I have a couple PA-200 with high cpu and memory. The process that is consuming high cpu is the pan_task. I know this process is related to thread analizys. I need to know what is the best command to show the real memory allocated by each process.I see the memomy for each process with the command >show system reso...

Apadilla by L3 Networker
  • 11532 Views
  • 5 replies
  • 0 Likes

Resolved! Automation Python or API

What is the difference between API vs Python for scripting? Whats benefit of one over ther other Does anyone a actaull working pything script i can mimic? I have followed all instrcitions and cant seem to get python to work

Resolved! 100% DP CPU utilization!

Hi, I've one client that suddenly started getting high dp utilization, the DP utilization will be at this crazy level during the working hours. I noticed most of the traffic passing through his firewall is SOAP, SSL & Web Browsing with a huge amount of traffic, nearly 5GB per hour for those apps only.He didn't do any changes to the configura...

Resolved! TRAPS with Firewall

Hi, My company is thinking to deploy TRAPS and I was going through deployment documents but I am not sure if the TRAPS will some how integrate with PA Firewalls or there is no Integration between both and if we can use Panorama to collect TRAPS logs. Another question is it possible we can use migration tool to get configurations from 5 d...

Resolved! packet /s in one interface

Hello, Do you know what is the command to see the packet by seconds is going through in one interface? or how many packets allow at the same time one interface ? Best RegardsAndres Padilla

Apadilla by L3 Networker
  • 2393 Views
  • 1 replies
  • 0 Likes

Have to reboot globalprotect client to connect.

WE have a problem with globalprotect- The users sometimes need to disable the globalprotect client in order to connect to another VPN. Later when the globalprotect client is re-enabled, any attempt to authenticate immediately returns a username/password invalid error. If the user reboots the computer, the globalprotect client works first try....

fmurray by L1 Bithead
  • 13844 Views
  • 5 replies
  • 0 Likes

Resolved! Best practice for assigning IP addresses to HA1 and HA2 on directly connected PA3050's

I am setting up HA on two PA3050's. They are racked one above the other and will be directly connected HA1 to HA1 as well as HA2 to HA2. However, the management ports are connected into a pair of Cisco 3750's stacked. My question is, what is the best practice for assigning IP addresses to these interfaces? My thoughts are to allocate two addr...

fcrooks by L1 Bithead
  • 8381 Views
  • 3 replies
  • 0 Likes

Management Profile and Security rules

Hi There,I got a question, on non-mgmt interface firewall, I configured a management profile to access SSH and HTTPS do I need to allow the security policy explictly to access firewall ?

Rokkam by L0 Member
  • 4316 Views
  • 2 replies
  • 0 Likes

Resolved! Check software update failed

Hi all! I have this problem: when i check new software updates, clicking "check now" button, this error appears: "Failed to check upgrade info due to generic communication error. Please check network connectivity and try again." Doing a traceroute we see that after the 17th hops the trace stops, all the ping are unsuccesful17 * paloaltonetit-5....

DKanta by L2 Linker
  • 28858 Views
  • 16 replies
  • 0 Likes

Resolved! How To Best Control Access to SFTP Server in DMZ

I have an interesting problem. There is a requirement for moblie devices (Throughout the Us and Canda) to access an SFTP Server from the Internet and upload files to it. No other devices are allowed access, from the Internet, to the SFTP server. The mobile devices will not have stat IPs but dynamic ones. The will of course not be part of our Win...

  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
Labels