This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Can i prevent windows login bruteforce through palo alto?

Hello all, is palo alto is capable of detecting password bruteforce attempts on windows login, for example, if a user put the password wrong many times while he was trying to login to a machie inside a company, is palo alto capable of detecting this kind of activity, i am not talking about HTTP or SMB bruteforce, i am talking about kerberos auth...

Resolved! Dual ISP and returning traffic

Hi, this is the scenario: - ISP1 : only for GlobalProtect-ISP2 : only for Internet access ISP1 has distance 10 and metric 10ISP2 has distance 10 and metric 15 in this scenario the ISP1 interface responds to Global protect gateway/portal no problem. Also ISP2 pings, and i can access management through ISP2 public ip. If i change the metric to ISP...

myrdin by • L2 Linker
  • 3747 Views
  • 2 replies
  • 0 Likes

Anyone using vwires consisting of a single interface on one side and a link aggregate on the other?

We've discovered what we consider a handy feature: creating a vwire with a single interface on one side and a LAG on the other side. This lets you connect a network device with no redundant network connection capabilities to a LAG on a pair of switches for redundancy. We are using this to connect a router and a remote access box to two switches ...

Resolved! URL Test site - Down?

http://urlfiltering.paloaltonetworks.com/testASite.aspxI am having issues getting to the test site.Are the servers down?

Resolved! VPN SSL Two factor authentication

Hi,i'm looking for a solution for VPN, that will support authentication in Active Directory and will support Two Factor authentication with OTP.I read that GlobalProtect can provide me all features.My questions:is there any Palo Alto native VPN client or WEB client only ?if there is native VPN client: - does it support Windows 10 and OS X 10.11 ...

Anahaym by • L0 Member
  • 3740 Views
  • 3 replies
  • 0 Likes

Different DHCP Subnets on same Interface

Hello everyone, one of my customer has the following specific requirement. PA500 version 7.1.0Inside Interface IP: 10.0.1.1/24 Firewall should act as DHCP Server and assign IP Addresses in the following Scopes only via inside interface. Scope: LAN DevicesRange: 10.0.1.50-10.0.1.100 /24Gateway: 10.0.1.254 Scope: WAN DevicesRange: 10.0.25.50-10.0....

Two Subnets For Two Group Of People

Hi,Can one help me how to configure two groups of people that use GP as a VPN client?let say I have user 1-5 needs to access my inside firewall with subnet 192.168.1.0/24and I have users 6-10 needs to access my inside and couple of the IPsec tunnel to reach inside of other firewalls with subnet 192.168.2.0/24 Is there a way to do it by multipl...

PAN-DB cloud list loading failed

I've been getting alerts from all my PAN firewalls starting last night at 8:51pm EDT that they can't connect to the PAN cloud to update the PAN-DB URL database.Anyone else seeing the same or a similar issue?

Issue when loading from AWS Marketplace Palo Alto VM-Series

Hi, When loading the AMI from AWS Marketplace, I get the following error when the machine tries to boot: Enter 'maint' for boot menu.Booting PANOS (sysroot0) after 5 seconds...Booting 'PANOS (sysroot0)' root (hd0,1) Filesystem type is ext2fs, partition type 0x83kernel /boot/vmlinuz ro root=/dev/sda2 init=/sbin/init_single_core console=ttyS 0,960...

Allow a single URL in a URL filtering policy

Good morning All, I have been playing with PA frewalls for a while now but can't seem to find and answer on this. Is it possible to block all URLS in the block list and then have an allow for one or two allowed URLs (for a public use computer) I was hoping a wildcard of * in the block list would achieve this - can anyone confirm if they have don...

LDAP servers for fault tolerance only?

Dear community, I am struggling around with a though I cant find an answer for. I every documentation I found they state that additional LDAP server are for fault tollerance only. Imagine the follwing setup: A customer is loadbalancing user authentication against more than one LDAP servers. So actually that means the firewall will only monitor o...

Rboehme by • L2 Linker
  • 2510 Views
  • 1 replies
  • 0 Likes

Resolved! Setup Routes

I need to setup a route to IP Address using a gateway IP. Cannot find anything that is crystal clear on how to set these up.

TDBDIS by • L0 Member
  • 2615 Views
  • 2 replies
  • 0 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks