General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 256 Views
  • 0 replies
  • 1 Likes

Error after Upgrading to 6.1.10

I upgraded our Panorama and two PA3020's in a HA setup this morning. Afterwords I am getting the following errors committing from Panorama to our PA3020's.

 

  • Details:
  • . Configuration committed successfully
  • Warnings:
  • . vsys1 (vsys1)
  • . Warning: NAT DIP
...

stjones by L0 Member
  • 3113 Views
  • 1 replies
  • 0 Likes

Syslog parser

Hi all, do you know if it is possible to use the syslog parser to obtain device information (for instance Operating system) and use this info in security rules?. I am using the syslog parser to obtain the IP-User mapping and it works perfectly, now I

...

ssancho by L2 Linker
  • 2063 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama HA Status

Hello everyone,

 

When I have 2 firewalls in an HA state after a few minutes my primary device gets a Non-functional (Drive error detected). I normally fix this by suspending the local device on my passive firewall. Is there a way to keep both device

...

Resolved! forming firewall HA in a panorama managed environment

we have a panorama managed firewall and we push objects from panorama to it . we are considering to make a HA firewall setup . as per articles from PaloAlto , Panorama objects are not being synchronized.

Question 1 : Should we add secondary firewall t

...

User-ID Agentless question

Is there a reason why with Agentless User-ID I still never see any logs in Monitor? As shown below it definitaely is working but traffice logs do not sohw user-ids. I have a any any policy and user-id  box is checked on  the zones. ANy ideas? I ahve

...

Error upgrading PA200

hi,

 

We have a PA200 in version 6.1.0 and we install the versions 6.1.11 but we receive this error:

 

"Failed to install 61.11 with following errors. SW version is 6.1.11 Error: At least one local superuser should be defined in Administrator. Failed

...

Resolved! Using ECMP and path monitoring

Hi all,

 

Does anybody try to configure ECMP ?

I did and it works perfectly.

 

 

Only one question: on which condition, palo stop sending traffic through one of the ECMP gateway ?

 

I tried many config but the only one working is to shut the palo int

...

VinceM by L5 Sessionator
  • 6493 Views
  • 6 replies
  • 0 Likes

Resolved! Issues with Webpages Hanging

Hi All,

 

I'm new to Palo Alto and have been having issues with content loading on my network.  Across the network, webpages that are being loaded in browser will periodically hang and as soon as the user refreshes them they load right away.  Also vide

...

Resolved! How to configure NAT for untagged subinterfaces?

I'm trying to set up a fairly simple configuration where we have our separate wired and wireless networks connecting to the internet via one shared interface eth1/1

Basically, I am attempting to replicate the configuration here https://live.paloaltone

...

Resolved! ACC 7.0 - App usage by IP

Im not finding the way to see the application usage by IP on the new 7.0 ACC.

For example in the old ACC when i click in one of the top App (for example SSL) it send me to a new page that shows me the top sources and top destination for that applicat

...

aprync by L0 Member
  • 3058 Views
  • 4 replies
  • 0 Likes

Requiring "Continue" to download PE executables?

How have people done this in practise?

 

We would like to prompt people so they have to choose "continue" to download PE executable files.

 

I know this only applies to "web-browsing" but when I test this, a Google Chrome update shows as "web-browsin

...

Panorama admin authentication and Admin Roles

 Hello,

 

Is there a best practices guide regarding Panorama Admin roles that includes the pros and cons of using Radius vs Active Directory or even TACACS+ to authenticate Firewall/Network admins.   What are other large Enterprise environments doing

...

  • 23627 Posts
  • 107 Subscriptions
Top Liked Authors
Labels