General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Slow download over decrypted TLS sessions?

I've noticed that downloads that occur over decrypted TLS sessions are incredibly slow since upgrading my PA-3050s to PAN-OS 6.1.x (now on version 6.1.12).  Sometimes they don't even complete at all, either failing or just sitting forever.  For examp

...

Resolved! RSH session issue passing through the Palo Alto

Hi Guys,

 

Interesting one. 

 

1x2.1x4.1x4.1x5 makes an initial connection using RSH the 192.168.0.20 then creates a separate RSH session back to the originating server but this always fails as the Palo seems to ignore the rule and NAT that is in place f

...

Brightcloud connection error

I have a PA-500 that is receiving the error of:

opaque: Failed to connect to Brightcloud update server service.brightcloud.com, initiated by 192.168.75.30

eventid: connection-failure


There seems to be no connectivity issues to URLs for the users. Just

...

jprice2 by Not applicable
  • 5542 Views
  • 12 replies
  • 0 Likes

Automate GlobalProtect VPN connection

Hi All,

 

 

 

We are trying to automate connections using the GlobalProtect VPN with a batch script. There's a way to accomplish it?

 

I've tried to use the PanGPA.exe in "C:\Program Files\Palo Alto Networks\GlobalProtect\" without success.

 

Any kind of hel

...

fruiz5 by L1 Bithead
  • 7919 Views
  • 9 replies
  • 0 Likes

Resolved! Block http traffic to numeric URLs

Hi,

 

I was ordered to block all http and hhtps traffic to addresses without a dns name. In other words user have to put in a network name in the browser and are not allowed to type an IP address in the address field.

 

As the thinking behind is bloc

...

PA identifying traffic from AKAMAI as BruteForce.

Hi guys,

 

Context: For the past 24 hours we've had constant reports of a Brute force attack on our servers originating from the Akamai CDN's.

 

I'm unsure whether this is simply a false positive, or if there something to actually worry about.

 

I've

...

MIGAS by L1 Bithead
  • 5649 Views
  • 8 replies
  • 0 Likes

Panorama not generating summary logs

Hi,

 

I have an unlicensed Panorama (for the sake of testing) to aggregate logs from the Palo Alto. I've set up log forwarding on the firewall, Panorama is receiving logs and detailed traffic is showing up properly, but there are no summary logs genera

...

nikoo by L3 Networker
  • 1691 Views
  • 1 replies
  • 0 Likes

Resolved! How to downgrade HA pair from 7.1.X to 7.0.X version.

Hi Guys,

 

What is going to be a right way/steps to downgrade PA from the version mentioned above?

 

1) Disable "preemption" on the both nodes. Commit changes.

2) On the "passive" node load config that matches your version. Let say l am going to inst

...

Resolved! EBL Issues

I've just started to test working with an EBL to quickly update a block list without having to apply the URL Filter to all of the different groups that we have. I've verified that I have connection to the document and that the Palo Alto sees it but I

...

BPry by Cyber Elite
  • 6088 Views
  • 11 replies
  • 0 Likes
  • 23595 Posts
  • 103 Subscriptions
Top Solution Authors
Top Liked Authors
Labels