General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 646 Views
  • 0 replies
  • 0 Likes

How to prefer 1 ISP for one application

I got why huge traffic is coming to port 3978.Application is identified as Panorama.
Its hge Gbs of traffic in one session.
The source IP is firewall management Ip and destination is Panorama IP.

But why i need to kill this session means, we have a setu

...

Adding IOCs to URL Filtering

Hi PAN Live Community,

 

If I add additional IOCs (URLs/Domains/IPs) to our current active URL Filtering Profile, how do I make those new IOCs take affect?

 

Besides committing the changes to the added IOCs, do I need to re-apply the this profile to the

...

eliang by L1 Bithead
  • 2411 Views
  • 3 replies
  • 0 Likes

Resolved! Error in threat signature, how do I report?

Hi All,

 

I recently came across an odd log for a customer of mine and after much analysis and research I have found that it is actually a false positive on Palo Alto's side regarding the signature of a threat. How do I go about report this? I am unabl

...

Resolved! Why does the ip-user-mapping distinguish DP and MP?

Hello

 

suddenly, I am wondering that ip-user-mapping have two table[DP, MP]

After connecting to AD Server to get Security logs, Why PAFW get that table seperatly,?

 

I think there are reason, and I don't know well about relating to DP, MP

 

If DP wa

...

John_Lee by L2 Linker
  • 4610 Views
  • 4 replies
  • 0 Likes

Resolved! In which vsys to place aggregate interfaces?

Hello,

 

I have multi-vsys system with multiple aggregate interfaces (L3). I am going to configure multiple VLANs on each aggregate interface and place them in different vsys. My question is where to place the aggregate interface itself. I was planning

...

HAL9000 by L1 Bithead
  • 3190 Views
  • 3 replies
  • 0 Likes

PA and AD Integration

My PA is experiencing a lag between when user accounts are modified in the AD group used for VPN authentication and when the PA begins enforcing the new account settings.  Is this fixable?  What is the maximum lag that I should be seeing?  Is it poss

...

RustyPA by L1 Bithead
  • 1842 Views
  • 1 replies
  • 0 Likes

Resolved! 3050 - Maximum Number of Routes & ProxyID

Hello All:

 

We have (2) 3050s in an Active/Passive & we do a ton of VPNs. As such, we have a lot of static routes & ProxyIDs. Can someone tell me the maximum # of each that the 3050 supports? We're running 6.1.4 now - gonna get to 7-something when we

...

Resolved! How to request new URL Category

The UK Government has informed Local Authorities that they should implement measures to prevent radicalization and extremism, which includes filtering Internet access available in LA provided public facilities, such as Libraries, and Schools.

 

As the

...

Nig by L1 Bithead
  • 3351 Views
  • 4 replies
  • 0 Likes

Resolved! Outbound SSL Decryption Capabilities

I know outbound SSL decryption can work when a client inside the network is accessing a secure website on the internet.  But can SSL decryption work when a client on the internal network attempts to make a vpn connection to a vpn server using an SSL

...

RustyPA by L1 Bithead
  • 2916 Views
  • 2 replies
  • 0 Likes

Authenticated threat feed - Miner node

Hi all,

 

A customer of mine subscribes to a threat feed where they need to authenticate (using web form) to recieve the inputs. Maybe I have missed this, but I couldn't see any predified miners to achieve this?

 

Thanks,

Tim

tkirk by L1 Bithead
  • 4582 Views
  • 1 replies
  • 0 Likes
  • 23945 Posts
  • 113 Subscriptions
Top Liked Authors
Labels