This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! No inbound packets observed

Hello, Trying to troubleshoot an issue of aged-out traffic flow. It was SSH traffic originated from customer's LAN and destined to Internet address. Packet capture was configured on the firewall for troubleshooting but only outbound (but no inbound) packets were observed inside the PCAP files. Tried via WebGUI and CLI. Could it be that the incom...

Farzana by • L4 Transporter
  • 4978 Views
  • 2 replies
  • 0 Likes

ACC traffic does not sum up correctly for different time ranges

Hi, Issue: Lets say we filter out web-browsing in ACC to check the traffic amount used by that specific app. We check three different ranges: Week1 - 300 MB & 8k sessions Week2 - 700 MB & 18k sessions Week3 - 1 GB & 23k sessions ... and now we select Week1+Week2+Week3 custom range, basically it contains everything within these we...

nikoo by • L3 Networker
  • 5383 Views
  • 8 replies
  • 0 Likes

Resolved! Disk usage steadily increases and high CPU usage

Hi, I integrated a few custom feeds into MineMeld that have a high number of indicators. The dashboard shows 202.4K, across 21 miners. I noticed two things that I'm hoping I can work around: Disk usage is steadily increasing in the /opt/minemeld/local/data directory. Some of the feed directories are over 2GB and increasing. When I left the offi...

Resolved! GlobalProtect 3.1.1 compatibility with PAN-OS 7.0.7

Hi, I would like to know the recommended version of GlobalProtect if we have PAN-OS 7.0.7 running in our environment. We want to install GlobalProtect 3.1.1 but we are no sure about the compatibilty with 7.0.7. Could you please advise? Regards,Sharief

Standby Palo Alto Restarted automatically

Dear Experts, One of our PA firewall (2050) model that was in standby mode , restarted automatically. After checking the system logs , i found the message ( in sequence) as shown below. 1. 'md_mgr-apps: restarts exhausted, rebooting system'2. 'The system is shutting down'3. 'HA Group 1: Moved from state Passive to state Suspended' Could you plea...

shijimon by • L0 Member
  • 4250 Views
  • 3 replies
  • 0 Likes

PA-500 Manual Content Update - 3.1

I have a PA-500 that has no internet access currently. A factory reset was done on it bringing it down to 3.1.4. I need to manually install the content updates in order to upgrade the device. The dynamic updates on the support site are for version 4.0 or newer. Where can I find the legacy content packages so I can upgrade fro, 3.1.4 to newer ve...

how to edit subinterfaces in XML config

Hello I need to modify my config. Now its looks like:I need to "move" ethernet 1/4.111 as a subinterface ethernet1/7, and all polices and other related objects. SO I opened in editpad lite my config and I try to move part od config related to this subinterface:</entry><entry name="ethernet1/4.111"><ipv6><neighbor-discovery&...

2016-09-20_210651.png
2016-09-20_211159.png
_slv_ by • L4 Transporter
  • 7329 Views
  • 5 replies
  • 0 Likes

Resolved! System crash leaves stagnant pidfile

In my setup if I have a os/system crash, it leaves behind a stagnant pidfile. This makes sense. However on startup minemeld is set up to start at boot/runlevel 3 or whatever run level. It seems the stagnant pidfile does not in fact get cleaned up so the processes do not start. If the pidfile were stored in /run then this would not be the fact ...

chirss by • L3 Networker
  • 5449 Views
  • 5 replies
  • 0 Likes

Resolved! Azure s2s between PA keeps restarting after 5min

Hello, i couldn't find answer to this anywhere even thought i found similiar problems. I followed this guide on how to set up vpn between Azure cloud and PA device: https://live.paloaltonetworks.com/t5/Integration-Articles/Configuring-IKEv2-VPN-for-Microsoft-Azure-Environment/ta-p/60340 Everything seems to be working except for one thing that ma...

Janusz by • L1 Bithead
  • 11197 Views
  • 10 replies
  • 0 Likes

Palo Alto not booting

I've got a PA-2050 which is having issues with booting up. Worst is that I've got no support on this device. This is how it looks like when it boots up: Welcome to the PanOS Bootloader. U-Boot 4.1.14.0-0 (Build time: May 30 2013 - 16:56:05) BIST check passed. KESTREL board revision major:2, minor:0, serial #: 0003C105412 OCTEON CN3120-CP pass 1...

shyamraj by • L1 Bithead
  • 12174 Views
  • 5 replies
  • 0 Likes

Resolved! some help needed with CLI show command

Hello I'd like to copy my config to file.So I connected by PuttySSH, changed Session>Logging to file to Printable outputLogged and lunched:set cli config-output-format setconfigureshow but in every 40 lines add "lines 1-40" next "lines 41-80" "lines 121-160" ... how to get all my config into text file without additional "lines X-Y" ? Regar...

_slv_ by • L4 Transporter
  • 4950 Views
  • 2 replies
  • 0 Likes

Resolved! Access to restricted configuration articles @ https://live.paloaltonetworks.com

Can anyone tell me how to get access to restricted documents at https://live.paloaltonetworks.com ? I am currently troubleshooting VPN connections between Palo's and Cisco ISR's, and the document "IPSec site-to-site between Palo Alto Networks and Cisco with NAT device" found here: http://live.paloaltonetworks.com/t5/Configuration-Articles/IPSec-...

New Global Protect 3.0 is not good enough

I was looking forwad to the 'new and improved' Global Protect. I am still very dissapointed at how it works from a UI standpoint. When I am connected to the VPN how do I disconnect? Is there a button hiding around in this awful GUI? The only way I know of is to go to the task bar and do it from there. Can anyone please let me know of anoth...

OrN8ikM.png
original.png
pmc by • L2 Linker
  • 34988 Views
  • 41 replies
  • 14 Likes
  • 24445 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks