General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4118 Views
  • 0 replies
  • 0 Likes

Resolved! PA 3000 Error

I just had the follwing error on my PA gdb: 2 tracked gdbsgdb: 3 tracked gdbsgdb: 3 tracked gdbspktproc_n_log: got max gdb failure event Then the DP re-started. Does any one know what this means.

RC-BHF by L2 Linker
  • 3961 Views
  • 3 replies
  • 0 Likes

MineMeld + Palo Alto Networks on Dynamic Block List

Is there anyone able to share on how to configure minemeld nodes to automate resolving/capturing the “*.google.com.*” dynamic IP address, so I could integrate with palo alto networks dynamic Block list feature to identify most of the google.com IP addresses. I saw google.GCENetblocks and google.netBlocks in minemeld, but wondering if this cove...

Screen Shot 2016-07-19 at 9.00.47 am.png
dkoh by L2 Linker
  • 13013 Views
  • 8 replies
  • 0 Likes

Resolved! App and Threat content update release 609 MIA?

Am i the only one who got the reutine email about content update 609 who can't find it? It's not online for a dynamic update check by the firewall, nor is it online for manual download as far as I can tell. Anyone else seeing this update MIA? Thanks

darren_g by L4 Transporter
  • 3459 Views
  • 2 replies
  • 0 Likes

Connecting L3 Port of Palo Alto to the Switch

Hi there, On Palo Alto I have configured L3 interface and assgined ip address to it. I would like to connect this interface to the switch. The switch has an SVI configured with the port in the same vlan as the SVI. Can I connect the Palo Alto interface to the switch port which is configured with a vlan or do I need to make the switch port as a r...

Stable OS

I am currently on 7.0.7 and was thinking of upgrading to most stable version. Does anyone have any recommendation or cautions?

jdprovine by L4 Transporter
  • 1830 Views
  • 1 replies
  • 0 Likes

Minemeld - Cannot create new Miner Node

Heya All, I've been testing out minemeld and have it a bit of a brick wall.. When I attempt to create a new miner node via CONFIG > NEW, it completes successfully but the node cannot be found listed under nodes so I cannot add it as an input to the inboudaggregator. I have reviewed all the log files and couldn't find any relevant errors.. Has...

Error Checking credentials - Gateway Timed out

Hi There, I have installed Minemeld on my Ubuntu Server 14.04.. And the service is up and running.. Wheneve I use the default Username and Password to logon to the console, it gives me an error "Error Checking credentials - gateway timed out".. I have also checked the file opt/minemeld/log/minemeld-web.log for errors ? but could not find ...

maltwist by L2 Linker
  • 9024 Views
  • 4 replies
  • 0 Likes

URL Continue and Affect on Applications

Does anyone have any information on the functionality of an application say facebook or netflix on a phone (Android/IOS) where the traffic also goes through a URL policy that has those websites in a "Continue" function? Currently the Netflix application just "spins" on an IOS device I've tested so far.

PAN-200 CLI - limited commands

hii`m trying to troubleshoot some vpn tunneling connection dropsso i logged to the CLI execute some commands to troubleshoot the VPNs test vpn ike-sa gatewayshow vpn ike-sa gatewaytest vpn ipsec-sa tunnel none of this command exist even in configure modePAN-200PAN-OS-7.1any ideas?Thanks

pan200.jpg
Gav-Yam by L0 Member
  • 2960 Views
  • 3 replies
  • 0 Likes

Captive portal + decryption + squid: https problem.

Hi,I try to configure path for users to access the Internet. I use Palo Alto and squid. But not everything works as I expected.The path:user---Palo Alto ---squid ---Internet.Squid is behind Palo Alto because of citrix users. I want to control citrix users access and in scenario: user---squid---Palo Alto--Internet, it's not possible. Squid change...

okress by L1 Bithead
  • 2931 Views
  • 3 replies
  • 0 Likes

Resolved! Session Info on one Interface

I'm trying to find the session info on our outside interface; however I can't seem to find a command simular to show session info for looking at one interface.

BPry by Cyber Elite
  • 2271 Views
  • 1 replies
  • 0 Likes

Resolved! Where is PAN-OS 7.0.0?

I have been running PAN firewalls for years and have been the person responsible for upgrading PAN-OS on them since PAN-OS 3.1.9. Each time, going from one release to a version in a different major release involved downloading the base version of the major release as well as the version I want to go to.For example, upgrading from 3.1.9 to 4.0.8...

VPN Tunnel down - Troubleshoot

Hi Admins,I need some help to troubleshoot our problem with the VPN Tunnels. We installed a Cisco to PaloAlto VPN tunnel. The PA in passive mode. But constantly the tunnels go down.Here are some log outputs:less mp-log ikemgr.log 2014-04-23 09:21:54 [DEBUG]: sockmisc.c:335:sendfromto(): sockname 122.152.XX.XX[500] 2014-04-23 09:21:54 [DEBUG]: so...

Hithead by L4 Transporter
  • 18061 Views
  • 24 replies
  • 0 Likes

Resolved! Exclude address on Zone Protection

So we use a Barracuda and when it sends out for an update to it's spam filtering it gets identified on the zone protection as a Host Sweep; is their a way that I can exclude it's IP address from getting identified?

BPry by Cyber Elite
  • 3972 Views
  • 2 replies
  • 0 Likes
  • 24334 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels