This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

How to Change the Default Service TCP Port

Greetings, Is there anyway to change the default TCP port that an interface uses for HTTPS or SSH management service? For example, I am currently using the external interface to redirect port 443, via Destination NAT, service, and DST port translation, to an internal mail server. I also want to be able to manage the firewall via the same exte...

j.silva by • L1 Bithead
  • 10969 Views
  • 3 replies
  • 0 Likes

Resolved! How to filter Office 365 in source NAT?

Hello,We have a specific requriement to map Office 365 traffic to a specific source NAT to ensure we don't exceed the port limitation. The only way we can think of doing this is to include all the Office 365 IP address ranges in the destination of the source NAT configuration. Has anyone accomplished this in a more elegant way? It is less than i...

Qos

Hi,If I have 100 Mbps internet download speed ,If I want to shape like belowClass 1 , 10Class 2, 5Class 3, 5Class 5 , 10Class 6, 5Class 7 , 5Class 8, 5Do i need to assign Reamining 45 to (default class(4))The interface is 1GbpsSo what would be the value of default classThanks

sib2017 by • L4 Transporter
  • 3581 Views
  • 5 replies
  • 0 Likes

Palo alto site to any vpn ( SSL vpn configuration )

Hi Everybody , I would like to configure a senario . Please suggest me how to proceed on this . Devices : 1 Nexus switch , 1 Palo alto 3020 , 2 MBPS internet connection ( ISP ) GOAL : I would like to configure a Site to any VPN ( SSL VPN ) over PA 3020 to ISP so that users can login from outside network to ofice network via SSL vpn . Please sug...

issues after deployed VM-PA under VMware

Hello Community, I'm creating a lab with vmware vsphere 5.5. I deployed two firewall with the following network configuration in vmware. The issue is from the firewall I can to ping to my untrust and trust interfaces. But when I doing ping to the linux pc the ping failed. From the linux pc try to reseach to internet and the connection is failed....

vmwareconfig.JPG
PA interfaces.JPG
PApolicies.JPG
Apadilla by • L3 Networker
  • 7383 Views
  • 8 replies
  • 0 Likes

Resolved! Problem using URL-filterlists for PA

Hello, I am very happy, that I can create dynamical lists for using it in the PA. So I use ransomwaretracker.RW_URLBL with stdlib-aggregatorURL as prozessor and stdlib.feedHCGreen as output to create a URL-list. So I got a list like: ... http://217.64.197.138/~rivista_ipi/4kkmkfz http://237travellin.com/92nwao23 http://237travellin.com/telo7...

No Traffic/Threat/URL logs under Monitor tab

So I just stood up a PA-VM-100 fw on ESXi server and everything seem to work just fine except I am not seeing Traffic, Threat, and URL logs under Monitor tab on the WebGUI. I have spent past 48 hours trying to figure this out but to no avail. I tried restart the log receiver servers, management server but no luck. I even added another 40GB HDD t...

Panorama - address object use in templates

In panorama I'm having to mark address objects as "shared" in order to access them in a template. I'm curious if this is by design or if I've done something wrong. This panorama install is brand new so I'm still learning and the firewalls I'm setting up are not live yet. After I get this going I have other firewalls to import. I have one devi...

Facebook app post/refresh issues

Hello, Since a couple of days users encounter problems with the facebook app, all those users are using an Android device.It isn't possible to post new messages, refresh new facebook messages and also notifications can not be refreshed. It seems that facebook is offline.They never had this problems before. Using 4G and facebook works fine I see ...

facebook issues.JPG
ppater by • L1 Bithead
  • 3474 Views
  • 3 replies
  • 0 Likes

SYN packets dropped in HA mode

Sorry for reporting this here rather than through the proper channels but I am not a direct customer and our service provider who could submit this through the proper channels has not (at least to my knowledge). Our network is behind a pair of 5050s in HA mode and I have documented that between 10 and 20 percent of outbound SYN packets are ...

SYN start.jpg
SYN 20 minute.jpg

Resolved! PA 3000 Error

I just had the follwing error on my PA gdb: 2 tracked gdbsgdb: 3 tracked gdbsgdb: 3 tracked gdbspktproc_n_log: got max gdb failure event Then the DP re-started. Does any one know what this means.

RC-BHF by • L2 Linker
  • 4124 Views
  • 3 replies
  • 0 Likes

MineMeld + Palo Alto Networks on Dynamic Block List

Is there anyone able to share on how to configure minemeld nodes to automate resolving/capturing the “*.google.com.*” dynamic IP address, so I could integrate with palo alto networks dynamic Block list feature to identify most of the google.com IP addresses. I saw google.GCENetblocks and google.netBlocks in minemeld, but wondering if this cove...

Screen Shot 2016-07-19 at 9.00.47 am.png
dkoh by • L2 Linker
  • 13437 Views
  • 8 replies
  • 0 Likes
  • 24418 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks