General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1277 Views
  • 0 replies
  • 0 Likes

Resolved! Scanning AntiVirus through SMB

Hi guys,

 

As a "test" I have isolated one of my test servers so that all traffic flows through the PA-500.

On this test machine I installed IIS and set-up a simple ftp and website

This website folder is also accessible via a share.

 

The policy rules to a

...

Lync (Skype for Business) Across Organisations

Hi guys,

 

Is anyone else having issues using Lync (Skype for Business) when messaging, or sending file transfers, to someone in a separate Skype Organisation in an external network?

 

Not sure if this is a bug or not, as the application is being seen as

...

VPN between 2 Palo Alto Firewalls

Hi there,

 

I am trying to setup VPN between 2 Palo Alto Firewalls. On one side I have public address but on the other side I am using a private ip address as this Palo Alto is behind a router. The VPN is not coming up. I also tried to do port forward

...

Active/Active HA managed by Panorama

In the Active/Active HA setup, there is an option to "Enable Config Sync".  In the past I have used this because I didn't have Panorama.  Now I have a new set of PA5050s that are running in Active/Active mode and we purchased Panorama to go with it. 

...

Resolved! Application Block Page

I have a question. How does application block page work? I have it enabled but it doesnt seem to work. User gets app denied by certain policy, it shows Monitor/Traffic that he is indeed denied but instead of getting app block response page he gets a

...

Marcin by L0 Member
  • 4682 Views
  • 3 replies
  • 0 Likes

Large Scale VPN (LSVPN) - Opinions from end users?

I'm looking for feedback from customers who have deployed LSVPN on PAN-OS firewalls. I'm getting ready to rebuild a highly manual, semi-fullmesh VPN infrastructure of abotu 10 sites. Yes, I have a mess on my hands.

 

I am planning on a dual-hub and spo

...

rpugh1 by L0 Member
  • 2572 Views
  • 2 replies
  • 0 Likes

HA strange behaviour

Hi, we have a cluster Active/passive PA3050 in PanOS 7.0.9. Yesterday we realised that one of our firewalls was having a strange behaviour (event HA), and this morning this FW was in maintenance mode, i had to reinstall the image 7.0.9 and cluster is

...

HA.jpg

Zone Protection stats

I have recently setup/enabled some zone protection on one of my interfaces. I have set the values high since I have no way of knowing how much data is actually passing the interface and what threshold would trigger the dropping. Now that its running ...

murphyj by L2 Linker
  • 3374 Views
  • 2 replies
  • 0 Likes

Routing through same interface

HI

 

just ran into a very weird issue today.  A PA running version 7.1

 

The PA has IP 192.168.1.254 and it is the default gateway for the network. There is another network 192.168.2.0/24 reachable through 192.168.1.200. There is a route in the PA that s

...

myrdin by L2 Linker
  • 9432 Views
  • 14 replies
  • 0 Likes

Refresh FQDN failed

Hi guys,

 

I have a big problem.
My PA failed in refresh fqdn task and now the PA can't resolve Fqdn object.

My dns Setting are good and there is no drops between PA and DNS server.

 

Any advices?

 

Thank you!

Erez by L1 Bithead
  • 5717 Views
  • 6 replies
  • 0 Likes

Refresh FQDN failed

Hi guys,

 

I have a big problem.
My PA failed in refresh fqdn task and now the PA can't resolve Fqdn object.

My dns Setting are good and there is no drops between PA and DNS server.

 

Any advices?

 

Thank you!

Erez by L1 Bithead
  • 1796 Views
  • 1 replies
  • 0 Likes

Users randomly getting captive portal?

We're running a regular User-ID agent against our DCs.

 

99% of the time things are fine but we're getting calls from random people that every so often they're suddenly getting prompted to authentiate by the captive portal on the PAN and we cannot unde

...

NAT sessions troubleshooting

Hi,

 

is there a way to troubleshoot the NAT sessions in real time?

 

i know i can use , for example:

 

show session all filter nat-rule NATRULE

 

to see if i am hitting the NAT rule, but i have to keep issuing the command to do that. Is there a similar thin

...

myrdin by L2 Linker
  • 1992 Views
  • 1 replies
  • 0 Likes
  • 24178 Posts
  • 117 Subscriptions
Top Solution Authors
Top Liked Authors
Labels