This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

NTP sync failing after PAN-OS 7.0 upgrade

I upgraded Panorama to 7.0 and then 7.0.1 recently and it seems to have broken my ntp synchronization in Panorama. Now I get "NTP sync to server x.x.x.x failed, authentication type none". If I run a "show ntp":NTP state: NTP not synched, using local clock NTP server: x.x.x.x status: rejected reachable: no authenticatio...

firewall Policies list

I am on OS 7.0.10 and would like to get a nice easy to read list of the rules on my firewall, other than the html exported list does anyone know of a good method?

jdprovine by • L4 Transporter
  • 6696 Views
  • 8 replies
  • 0 Likes

Resolved! Syslog analyzer - how to configure logstash to send to remote, not local hosts ?

I have syslog analyzer created from prototype stdlib.localSyslog. Now I want it to send matching results to logstash but on remote not local server where MM is running. Default is I think below (host is 127.0.0.1), where do I change host address ? input { tcp { port => 5514 host => '127.0.0.1' codec => 'json_l...

niuk by • L3 Networker
  • 9670 Views
  • 6 replies
  • 0 Likes

Resolved! PA HA concept quick question

Hi Guys, Just to clarify that heartbeat ping messages send by bi-direction (Active>Passive and Passive>Active) and these messages proceed by management plane. So if my MP CPU utilisation is always high (98% it is 2050) is it possible to lose ICMP (heartbeat) messages? Cheers,Myky gurus members@reaper@kiwi@BPry

Policies / application question

Just trying to understand PAN and policies better. If we want to allow all web-browsing, what can we do? As soon as the application is identified, we will need a policy for this specific application (for example Google base). Otherwise we will hit an interzone default deny (if between zones). I can allow port 80 and 443 as services, but this wil...

mathiasj by • L1 Bithead
  • 2218 Views
  • 2 replies
  • 0 Likes

globalprotect key

When I install the globalprotect client on a pc I never have to enter a key, how and when does the key get passed

jdprovine by • L4 Transporter
  • 10182 Views
  • 23 replies
  • 0 Likes

Generate Traffic Report on PA Firewall 7 Months Ago?

Hi All,Tried generating traffic report from month of May. But, Under Manage Custom Reports > Run now "Result was No Matching Records" Report Setting are: Database: Traffic LogTime Frame: May1-31Sortby: Top 500Group by: 25 GroupsSelected Columns: Destination zOne Do you think we can still see those logs?For PA Admin. How long would our PA devi...

Resolved! ssl sever certificat can't be verified

Hello I encountered a strange situationI tried numerous time to connect a global protect agent in version 2.1.x on windows 8 and with a mac tooand I obtain a message can't verified the server certificatI tried to connect with the FQDN specified in the certificate server, and I installed manually the root CA and the intermediate ca in the correct...

Gregoux by • L4 Transporter
  • 5656 Views
  • 5 replies
  • 0 Likes

It does not update

Hi, Pa-500 show "app mistach" . They have 6.1.0 version and are configured in active-passive mode. They shows in interface web "App version" and "Threat version" Mismatch. If I make a ping to updates.paloaltonetworks.com from devices, my computer and "web ping online" and the this test fails. Is it normal? In system/logs, it shows connection to...

Screenshot_18.png
Screenshot_19.png
Screenshot_20.png
Screenshot_21.png

List Office 365 using MineMeld does not work

Hi, I have installed Minemild and I applied article and create dbl for Offcie365: https://live.paloaltonetworks.com/t5/MineMeld-Articles/How-to-Safely-Enable-access-to-Office-365-using-MineMeld/ta-p/120280 I have cretate 2 rules for Office 365 to test if feed sources Office 365 works. I have a rule to match with feed list office 365 servers and ...

Screenshot_11.png
Screenshot_14.png
Screenshot_13.png
Screenshot_12.png

Deploying Self Signed Certificate to Firefox

For those that have implemented SSL Decryption in your environment, I'd love to hear your experiences on how you deployed the certificate to Firefox users. There seem to be different methods mentioned, but not certain how reliable they are. Thanks!

mdyragos by • L1 Bithead
  • 4024 Views
  • 3 replies
  • 0 Likes

Mac MS RDP Cannot Connect to Win7 while GlobalProtect Agent is Connected

Using MS Remote Desktop (RDP) on MacBook to connect to a Win7 work station. When GlobalProtect agent (GP) is connected on Win7, an RDP connection cannot be made. Disconnect GP on Win7 and the RDP can connect. However, attempt to connect GP on Win7 after RDP has connected, and the RDP gets disconnected. Ideas? Version information:MacBook running ...

  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks