This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4131 Views
  • 0 replies
  • 0 Likes

Resolved! System crash leaves stagnant pidfile

In my setup if I have a os/system crash, it leaves behind a stagnant pidfile. This makes sense. However on startup minemeld is set up to start at boot/runlevel 3 or whatever run level. It seems the stagnant pidfile does not in fact get cleaned up so the processes do not start. If the pidfile were stored in /run then this would not be the fact ...

chirss by • L3 Networker
  • 5186 Views
  • 5 replies
  • 0 Likes

Resolved! Azure s2s between PA keeps restarting after 5min

Hello, i couldn't find answer to this anywhere even thought i found similiar problems. I followed this guide on how to set up vpn between Azure cloud and PA device: https://live.paloaltonetworks.com/t5/Integration-Articles/Configuring-IKEv2-VPN-for-Microsoft-Azure-Environment/ta-p/60340 Everything seems to be working except for one thing that ma...

Janusz by • L1 Bithead
  • 10239 Views
  • 10 replies
  • 0 Likes

Palo Alto not booting

I've got a PA-2050 which is having issues with booting up. Worst is that I've got no support on this device. This is how it looks like when it boots up: Welcome to the PanOS Bootloader. U-Boot 4.1.14.0-0 (Build time: May 30 2013 - 16:56:05) BIST check passed. KESTREL board revision major:2, minor:0, serial #: 0003C105412 OCTEON CN3120-CP pass 1...

shyamraj by • L1 Bithead
  • 11760 Views
  • 5 replies
  • 0 Likes

Resolved! some help needed with CLI show command

Hello I'd like to copy my config to file.So I connected by PuttySSH, changed Session>Logging to file to Printable outputLogged and lunched:set cli config-output-format setconfigureshow but in every 40 lines add "lines 1-40" next "lines 41-80" "lines 121-160" ... how to get all my config into text file without additional "lines X-Y" ? Regar...

_slv_ by • L4 Transporter
  • 4699 Views
  • 2 replies
  • 0 Likes

Resolved! Access to restricted configuration articles @ https://live.paloaltonetworks.com

Can anyone tell me how to get access to restricted documents at https://live.paloaltonetworks.com ? I am currently troubleshooting VPN connections between Palo's and Cisco ISR's, and the document "IPSec site-to-site between Palo Alto Networks and Cisco with NAT device" found here: http://live.paloaltonetworks.com/t5/Configuration-Articles/IPSec-...

New Global Protect 3.0 is not good enough

I was looking forwad to the 'new and improved' Global Protect. I am still very dissapointed at how it works from a UI standpoint. When I am connected to the VPN how do I disconnect? Is there a button hiding around in this awful GUI? The only way I know of is to go to the task bar and do it from there. Can anyone please let me know of anoth...

OrN8ikM.png
original.png
pmc by • L2 Linker
  • 32861 Views
  • 41 replies
  • 14 Likes

Configuring a Zone Without Interfaces

It is possible to configure a zone without any interfaces specified? Will the rule containing this zone be applied ?Will traffic that match this rule be accepted from any source and destination interface?

shaunyt by • L0 Member
  • 5343 Views
  • 4 replies
  • 0 Likes

Turn off logging when high load on data plane

I think I read something that said you can configure the PA to shut off logging if the dataplane was running a very high percentage of load and I would also like to be sent an alert if anyone has any information on this process.

jdprovine by • L4 Transporter
  • 10459 Views
  • 6 replies
  • 0 Likes

Resolved! Reloading Config: Internal Server Error

So I just installed minemeld this morning so bare with me as I don't really have everything down yet. The issue that I currently ran into is that when I go under the Config tab I immediately receive an "Error Reloading Config: Internal Server Error" and it says that there is No data available in the table. I'm trying to add our own blocklist as ...

BPry by • Cyber Elite
  • 18257 Views
  • 11 replies
  • 0 Likes

Resolved! PANOS HA A/A; catch east/west traffic of multiple vlans

Hi community,See attached visio.And supplied notes. There is no reason this won't work ? The reason for this is to,- Capture east/west 'inter-vlan' traffic that would normally be routed by L3 switch carrying SVIs, aka move the 'SVIs' up to the PAN. But that can't be done by a standard .1q trunk on an A/A setup, because A/A will not support L2 i...

PAN deployment.png
mpgioia by • L3 Networker
  • 2924 Views
  • 2 replies
  • 0 Likes

MineMeld in HA

Does MineMeld come with any kind of HA facilities? Do you see any issues or can share any gotchas for puting a couple of instances with the same config behind a load ballencer?

GlobalProtect support for Mac OS Sierra

Does anyone have any experience of using the GlobalProtect agent on the latest Mac OS version 10.12? It's not listed in the supported clients but am hoping it will work nonetheless. This is the version in which Apple have dropped PPTP support, so we're looking at alternative VPN solutions.

  • 24337 Posts
  • 124 Subscriptions
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks