This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Access to restricted configuration articles @ https://live.paloaltonetworks.com

Can anyone tell me how to get access to restricted documents at https://live.paloaltonetworks.com ? I am currently troubleshooting VPN connections between Palo's and Cisco ISR's, and the document "IPSec site-to-site between Palo Alto Networks and Cisco with NAT device" found here: http://live.paloaltonetworks.com/t5/Configuration-Articles/IPSec-...

New Global Protect 3.0 is not good enough

I was looking forwad to the 'new and improved' Global Protect. I am still very dissapointed at how it works from a UI standpoint. When I am connected to the VPN how do I disconnect? Is there a button hiding around in this awful GUI? The only way I know of is to go to the task bar and do it from there. Can anyone please let me know of anoth...

OrN8ikM.png
original.png
pmc by • L2 Linker
  • 34777 Views
  • 41 replies
  • 14 Likes

Configuring a Zone Without Interfaces

It is possible to configure a zone without any interfaces specified? Will the rule containing this zone be applied ?Will traffic that match this rule be accepted from any source and destination interface?

shaunyt by • L0 Member
  • 5653 Views
  • 4 replies
  • 0 Likes

Turn off logging when high load on data plane

I think I read something that said you can configure the PA to shut off logging if the dataplane was running a very high percentage of load and I would also like to be sent an alert if anyone has any information on this process.

jdprovine by • L4 Transporter
  • 11166 Views
  • 6 replies
  • 0 Likes

Resolved! Reloading Config: Internal Server Error

So I just installed minemeld this morning so bare with me as I don't really have everything down yet. The issue that I currently ran into is that when I go under the Config tab I immediately receive an "Error Reloading Config: Internal Server Error" and it says that there is No data available in the table. I'm trying to add our own blocklist as ...

BPry by • Cyber Elite
  • 18986 Views
  • 11 replies
  • 0 Likes

Resolved! PANOS HA A/A; catch east/west traffic of multiple vlans

Hi community,See attached visio.And supplied notes. There is no reason this won't work ? The reason for this is to,- Capture east/west 'inter-vlan' traffic that would normally be routed by L3 switch carrying SVIs, aka move the 'SVIs' up to the PAN. But that can't be done by a standard .1q trunk on an A/A setup, because A/A will not support L2 i...

PAN deployment.png
mpgioia by • L3 Networker
  • 3068 Views
  • 2 replies
  • 0 Likes

MineMeld in HA

Does MineMeld come with any kind of HA facilities? Do you see any issues or can share any gotchas for puting a couple of instances with the same config behind a load ballencer?

GlobalProtect support for Mac OS Sierra

Does anyone have any experience of using the GlobalProtect agent on the latest Mac OS version 10.12? It's not listed in the supported clients but am hoping it will work nonetheless. This is the version in which Apple have dropped PPTP support, so we're looking at alternative VPN solutions.

Mapping Public IP to Private IP (Internal Server)

Hello! So, i've got an internal server say (10.0.10.1) that needs to point to a public ip (64.60.16.18). I've been following the documentation and have yet to get it working. I have followed this guide for how to "Translate Internal Client IP Addresses to your Public IP Address"https://www.paloaltonetworks.com/documentation/60/pan-os/pan-os/get...

Resolved! Maximum file size that can be sent to WF-500

Hi, My question is, if we have a WF-500 appliance and we want to adjust the maximum file size limit that can be sent to the appliance, e.g. PDF maximum size is 1MB but we want to change it to 10MB. Is that possible? Regards,Sharief

Resolved! Can't contact LDAP server/connect error

Hi, No changes on Firewall or LDAP server side. All of a sudden noticed for some virtual systems, LDAP server connection failed.The LDAP is configured correctly and we have the read permissions for everything in AD user. Errors in usridd.log: 2016-08-22 10:50:34.768 +1000 connecting to ldap://[192.168.12.16]:636 with StartTLS...2016-08-22 10:50:...

Farzana by • L4 Transporter
  • 18939 Views
  • 4 replies
  • 0 Likes

Resolved! Does the Techsupport File contain sensitive information?

Hi, Just wondering if the techsupport file contain a sensitive information e.g. IP addresses, policies and configuration? Can someone please advice what are the actual information inside it? I'm getting hardtimes explaining this to clients from Bank environments. Regards,Sharief

How to prioritise users over Remote VPN (Global Protect)

I am wondering if you can advise me on a possible or best way to achieve the following. Current Situation============== We have remote VPN enabled on our Palo Alto firewall and we are using Global protect for that. Currently everything seems to be working fine. A user comes online and given a IP and then the user is routed to our Data Center wh...

nvirmani by • L1 Bithead
  • 3320 Views
  • 3 replies
  • 0 Likes

Resolved! Whitelisting o365

I want to make sure I understand the workflow on this correctly. To whitelist o365 I would perform the following: 1) Clone the o365 miners I want, prefixing them with wl 2) Edit the input for wlwhitelist and add the wlo365 miners I created. Is there anything I'm missing here?

chirss by • L3 Networker
  • 6999 Views
  • 5 replies
  • 0 Likes
  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks