This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

List Office 365 using MineMeld does not work

Hi, I have installed Minemild and I applied article and create dbl for Offcie365: https://live.paloaltonetworks.com/t5/MineMeld-Articles/How-to-Safely-Enable-access-to-Office-365-using-MineMeld/ta-p/120280 I have cretate 2 rules for Office 365 to test if feed sources Office 365 works. I have a rule to match with feed list office 365 servers and ...

Screenshot_11.png
Screenshot_14.png
Screenshot_13.png
Screenshot_12.png

Deploying Self Signed Certificate to Firefox

For those that have implemented SSL Decryption in your environment, I'd love to hear your experiences on how you deployed the certificate to Firefox users. There seem to be different methods mentioned, but not certain how reliable they are. Thanks!

mdyragos by • L1 Bithead
  • 4093 Views
  • 3 replies
  • 0 Likes

Mac MS RDP Cannot Connect to Win7 while GlobalProtect Agent is Connected

Using MS Remote Desktop (RDP) on MacBook to connect to a Win7 work station. When GlobalProtect agent (GP) is connected on Win7, an RDP connection cannot be made. Disconnect GP on Win7 and the RDP can connect. However, attempt to connect GP on Win7 after RDP has connected, and the RDP gets disconnected. Ideas? Version information:MacBook running ...

Resolved! Routing Table BGP

I presume that there is not way if I have a box that only has a max acceptance route of 2500 only way to adjust this value is to repalce box? No software updates can acheive this ?

Resolved! Feature Request

Am I the only one that is wondering why a "Feature Request" should be submitted to a reseller? Why not have a central site that is searchable so that you are not duplicating something already submitted or a sticky page that has feature requests that you can chime in on and say "Yeah, that sounds like something I'd like to see" or some variation ...

twilson by • Not applicable
  • 10196 Views
  • 8 replies
  • 5 Likes

Security Policy question setting application and services

Hello, in the security policy that is setup. Is it best to set the application and services the same?So this will help keep that security policy safe from outside device try to see what other application can be use on that security policy. example would be a nmap script using get commands with additionals handshakes in the script, so the logging...

Resolved! Set Interface to default settings

Hi everybody I got a pair of PA-3020. Some time ago I configured several interfaces to layer2 type and now they are not in use anymore. Is it possible to set them to default config, I mean with NO inteface type? I As you can see in the photo, ethernet 1/11 is (was) a Layer2 interface and I want to set it without any type, liker ether1/12 Is it ...

interfaces.png
SOC_CSG by • L4 Transporter
  • 3005 Views
  • 2 replies
  • 0 Likes

Resolved! Issues installing Minemeld

Team, I have run into an issue installing Minemeld following the documented process for install on Ubuntu Server 14.04 LTS. Below is the output from apt update. Seems that there is a GPG key issue and I have made sure that the fingerprint characters match. Any guidance that can be provided would be greatly appreciated! Thanks! -JN ...

jnewsome by • L2 Linker
  • 5089 Views
  • 2 replies
  • 0 Likes

Upgrade PAN-OS 7.0.9 to 7.1.6

Hi, We are planning to upgrade the PAN-OS software from 7.0.9 to 7.1.6. I read on some articles that the base image does not need to be installed. I have two options as follows: Option 1: 7.1.0 (Download, NO install).7.1.6 (Download and install).Option 2: 7.1.0 (Download and install).7.1.6 (Download and install). Which one is correct?

qafcopa by • L1 Bithead
  • 3468 Views
  • 4 replies
  • 0 Likes

Aggregated port over Vsys (AE1 over...)

Hi, I'm thinking about put som vlans inside and Aggregate, and distribitute over various Vsys, as far I know, reading here in the community, it's possible use subAEinterfaces on different VSYS. Then, the question is, on wich VSYS must be the physical interface AE1? AE1.1, AE2.3 will be distributed over Vsys, and no need to put IP on AE1. Regards!

nanukanu by • L2 Linker
  • 3011 Views
  • 4 replies
  • 0 Likes

Flood protection

What is the best way to set up flood protection, separate profile one for ICMP, one for SYN cookies etc or put it all in one policie? What is the best way to determine what set your alarm rates, block rate etc? How successful is it, does good traffice get blocked very much

jdprovine by • L4 Transporter
  • 7759 Views
  • 15 replies
  • 0 Likes

Ip missing in output

Hi, I have default profile. I added a node "RW_IPBL NODE" that has 11464 ips But after processing I only see 900. Generated I think by other nodes.What can be wrong? Thank you

Screenshot_5.png
Screenshot_6.png
Screenshot_7.png
Screenshot_8.png

MineMeld and dinamic list in Pa500

Hi, We have a Pa500. It read that only permit 10 list with a max 5000 ip's.it is right? I have deployed a MineMeld with default configuration. I have a list configured in Pa-500 https://ip-minemeld/feeds/inboundfeedhc. What does the pa-500 to be the largest list of 5000 ip? Do you only load the first 5000 ip's or do not load this list?Som...

Screenshot_2.png

License for SSL VPN (GP Client)

Hey guys, We have a PA 200 as lab firewall and I want to setup SSL vpn. Can you tell me which licenses I need for it? The GP window (Device -> GP Client) is completely empty. When I check for new versions, it says "The device does not have support". The same if I want to check for new PAN OS Software. I thougt it would be sufficient with the ...

LIC.PNG
MPI-AE by • L4 Transporter
  • 4058 Views
  • 3 replies
  • 0 Likes
  • 24449 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks