This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Evaluation Licence for Palo Alto Firewall

Hi All, I am preparing for PCNSE7 exam and it is very much required to have hands on experience to pass the exam. Hence, I set up own LAB and I have installed Palo Alto image on top of VMWare Workstation. Most of the features are funtioning properly. But I need to test some features like URL Filtering, Spyware Protection and anylyze logs etc. Is...

Google adwords & geofilter

Hello,what APP-ID can we use for grant selectiv access for google robots for the adwords campaingn.At the moment we have geo Filter in Front of the WEB-Server and in this Situation "Google adwords" does not work anymore.(Perhaps there are als other solution to let this Service selectively in ? René

rkuhn by • L0 Member
  • 3175 Views
  • 3 replies
  • 0 Likes

Idea searched to block NAT-Router

Hi, I have some clients who are installing a NAT-Router behind the Firewall to span their own WIFI. The NAT devices are from different vendors with different MACs. Has anyone an idea how to detect these NAT-devices irrespective of their MAC / IP-adress and how to deny all the traffic from these devices? My intent is to block all traffic, where I...

Ping identity with single sign-on, multiple users

Our support staff uses a single support portal login email and password to access our client's Palo Alto networks support. We have attempted to log in and are getting notified we need to download PingID. How would this work with multiple people using the same username? Can it be bypassed or how should we set this up for our support staff?

Resolved! VR override option. What is actually overridden?

Hi All, Looking into VR setting and could see some thins is overridden but not sure what is exactly. l didn't do this config before so not sure where to check these changes? OSPF cost? How can l find these changes in VR? Thx,Myky

OV.PNG

Resolved! interface flapping syslog severity info!

Hello, I am always wondering why an interface going down/up is being flagged by syslog as a severity : informational ! 2014/10/11 15:29:08 info port link-ch 0 Port 1: Down 1Gb/s-full duplex2014/10/11 15:29:08 info port link-ch 0 Port 2: Down 1Gb/s-full duplex How it is possible to modify this to critical and start...

Resolved! User-ID: gained access with run as admin

Hi all, several user have internet access and this depends on their user-id. some of them have admin-accounts and can run the ie as admin. the user logged into the AD as non-privileged user and this is controlled by the WMI-Process of the USER-Agent. But this construct didn't recognize when the user starts the IE with run as admin.is there a cha...

kdd by • L4 Transporter
  • 9669 Views
  • 7 replies
  • 0 Likes

Resolved! Panorama CLI command to add a tunnel interface to a zone

Trying to use the Panorama CLI to edit a template and add a tunnel interface, and also assign it to an existing zone in the same template. Does anyone know the CLI command to do this? I can add the tunnel interface and assign it to a virtual router like this: configure edit template myTemplate set config network interface tunnel units tunnel.100...

External Dynamic List Limit

Ref: PA-5020PAN-OS: 7.1.5 What are the limits for External Dynamic Lists?Number of ListsNumber of Entries/ListAre EDLs entries and lists counted in the total number for URL filtering? The documentation does not reference EDLs... https://www.paloaltonetworks.com/products/product-comparison.html Please advise,

Disk space & OS upgrades

I regularly update the OS to the next recommended version every other month, and I was wondering if there was anything that has to be done to clean up the hard drive so as not to run out of space?

jdprovine by • L4 Transporter
  • 12095 Views
  • 31 replies
  • 0 Likes

Chromebook / Chromium - security rules prior to login - network not available

Hi All, I'm a newbie on the world of Palo but can't find a way around this issue "yet" so was hoping for some advice. I have around 500 chrombooks and these are all tied into Google Directory services, they work fine etc etc. however i'm trying to have the devices work through the palo alto with user authentication for browsing which is tracka...

DNS aged-out, tcp-rst-from-client, and tcp-fin

I'm pretty new to Palo Alto products, and I just inherited one. I was having some small issues getting to a site (just a minute or two delay). When I went to the Monitor tab, and saw something that looked a little strange, but could be completely normal. There are a lot of these every second. Is it normal for a DNS to go to aged-out or tcp-...

DNSage-outEdit.png
  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks