General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Resolved! Using ECMP and path monitoring

Hi all,

Does anybody try to configure ECMP ?

I did and it works perfectly.

Only one question: on which condition, palo stop sending traffic through one of the ECMP gateway ?

I tried many config but the only one working is to shut the palo int

...

Resolved! Issues with Webpages Hanging

Hi All,

I'm new to Palo Alto and have been having issues with content loading on my network. Across the network, webpages that are being loaded in browser will periodically hang and as soon as the user refreshes them they load right away. Also vide

...

Allow certain URLs only for a specific user

Is there any way to restrict a certain user to only a few websites?

There is URL filtering but I believe that is global and I wanted for only one user

HA1 interface was down during 1 second by restarting connection after heartbeat failure.

Hello,

I wathched strange logs.

Hence I would like to get your help.

Please look at the following logs.

PA missed 4 pings then restaring connection. So HA1 interface was down during 1 second.

I remember take-over just happen after missed 4 pings.

...

Resolved! How to configure NAT for untagged subinterfaces?

I'm trying to set up a fairly simple configuration where we have our separate wired and wireless networks connecting to the internet via one shared interface eth1/1

Basically, I am attempting to replicate the configuration here https://live.paloaltone

...

Resolved! ACC 7.0 - App usage by IP

Im not finding the way to see the application usage by IP on the new 7.0 ACC.

For example in the old ACC when i click in one of the top App (for example SSL) it send me to a new page that shows me the top sources and top destination for that applicat

...

Requiring "Continue" to download PE executables?

How have people done this in practise?

We would like to prompt people so they have to choose "continue" to download PE executable files.

I know this only applies to "web-browsing" but when I test this, a Google Chrome update shows as "web-browsin

...

Panorama admin authentication and Admin Roles

Hello,

Is there a best practices guide regarding Panorama Admin roles that includes the pros and cons of using Radius vs Active Directory or even TACACS+ to authenticate Firewall/Network admins. What are other large Enterprise environments doing

...

Best 7 OS version

I am planning on moving to the best version of the 7 OS next month any one have a preferred version or any gotcha's to avoid?

About throughput performance with only url filtering

Hello,

I have questions.

I know throuhput performance is half when using Threat Prevention.

If we would use only url filtering, how is PA's throughput performance? Is it same when using TP or only using application?

And If we would use only file

...

Resolved! DBL Formatting

We're having an issue getting firewalls running PANOS 6.1 and 7.0 to consume the DBL's created by Minemeld output nodes. None of the output node URL's end with .txt, which appears to be a requirement according to the live documents below. However, .t

...

Resolved! Complex User-ID Scenario... Ideas? Solutions?

Hey all -

I work for a very large global organization. Our design for User-ID is such that some locations can use the UID Agent, others can't - and so they use the Agentless, on-box UID. One issue we have is that we have thousands of what we call "c

...

Error updating Panorama to 5.1.0

Hi, we have installed the version 5.1.0 in Panorama and changed the values (LSI,RAM,SO) in VM, but when we restart the VM the panorama is not going up.

CMS withouth credentials is not working.

Maintenance mode shows this:

What could we do?

...

Captive portal issue

I have a url catogery named office365 . I have configured it for no portal for http and https services. But when I check the monitoring logs it shows captive portal yes for this catogery.

Resolved! Multiple IP's on a single interface

This may seem like a silly question but hope someone will be able to answer for clarification. I have inherited a less then stellar network IP Scheme where the second octet is the same as the vlan id. However they started this in the 172. address spa

...

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free