General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 2184 Views
  • 0 replies
  • 0 Likes

U-Turn NAT with Port Address Translation in a DMZ

Hi Community,

 

I am configuring my first PA-200 and having a difficult time. I have a /27 external network and have the PA-200 seeing the internet properly. I have internet untrust zone setup as l3 on Int 1.1, and a DMZ setup as l3. The DMZ zone is on

...

DMZ Depiction PA-200.jpg

Resolved! Custom applications and application override

I'm looking to get a better understanding of how custom applications work in relation to application override policies vs security policies.

 

I have created a simple custom application with just a tpc port for an internal application. There appears to

...

Priority in PAN-QoS

Hi, 

 

When you are configuring QoS, it's possible to define more than one profile, and in this profile put 'til 8 Class defined. 

 

When you apply over the egress interface, it's possible to add this Class based over an source Subnet.

 

Here is my questio

...

nanukanu by L2 Linker
  • 4320 Views
  • 5 replies
  • 0 Likes

Resolved! PAN AD Useragent - Excluding users?

Hi.

Is it possible to exclude a specific user from the PAN agent configuration?

I know you can filter based on group - unfortunately, the user concerned, which is used for several automated processes, is also a member of AD groups which I can't exclude

...

dagibbs by L4 Transporter
  • 19181 Views
  • 29 replies
  • 0 Likes

Resolved! Wildfire verdict malicious and action alert

Hi all,

 

We have seen in Wildfire Submissions that all files identified as Malicious and Grayware the action is Alert. The Wildfire Profile is configures to forward to public cloud and Antivirus profile has reset-both in Wilfdire Action tab.

 

Is this a

...

image.png
COMIP by L2 Linker
  • 5078 Views
  • 3 replies
  • 0 Likes

Resolved! PAN-SA-2016-0025 Kernel Vulnerabilities

Summary

The kernel in use by the Management Plane of PAN-OS is vulnerable to CVE-2015-5364 and CVE-2015-5366. (Ref # PAN 52379/87408)

 

Severity: High

The CVSS Score of CVE-2015-5364 is 7.8, High; while the CVSS Score of CVE-2015-5366 is 5.0, Medium. Tho

...

Resolved! PAN-DB to BrightCloud

Greetings All,

 

I know that we tend to recommend PAN-DB over BrightCloud, but in this instance I have a client who prefers to use BrightCloud.

 

Can someone please confirm how to migrate over correctly. This use to be available in the following link, bu

...

Resolved! No inbound packets observed

Hello,

 

Trying to troubleshoot an issue of aged-out traffic flow. It was SSH traffic originated from customer's LAN and destined to Internet address. Packet capture was configured on the firewall for troubleshooting but only outbound (but no inbound)

...

Farzana by L4 Transporter
  • 4236 Views
  • 2 replies
  • 0 Likes

Resolved! Disk usage steadily increases and high CPU usage

Hi,

I integrated a few custom feeds into MineMeld that have a high number of indicators. The dashboard shows 202.4K, across 21 miners. I noticed two things that I'm hoping I can work around:

  1. Disk usage is steadily increasing in the /opt/minemeld/loca
...

Resolved! GlobalProtect 3.1.1 compatibility with PAN-OS 7.0.7

Hi,

 

I would like to know the recommended version of GlobalProtect if we have PAN-OS 7.0.7 running in our environment.

 

We want to install GlobalProtect 3.1.1 but we are no sure about the compatibilty with 7.0.7. Could you please advise?

 

Regards,

Sharie

...

Standby Palo Alto Restarted automatically

Dear Experts,

 

One of our PA firewall (2050) model that was in standby mode , restarted automatically. After checking the system logs , i found the message ( in sequence) as shown below.

 

1. 'md_mgr-apps: restarts exhausted, rebooting system'

2. 'The sy

...

shijimon by L0 Member
  • 3753 Views
  • 3 replies
  • 0 Likes

PA-500 Manual Content Update - 3.1

I have a PA-500 that has no internet access currently. A factory reset was done on it bringing it down to 3.1.4. I need to manually install the content updates in order to upgrade the device. The dynamic updates on the support site are for version 4.

...

  • 24253 Posts
  • 119 Subscriptions
Top Solution Authors
Top Liked Authors
Labels