This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Connecting L3 Port of Palo Alto to the Switch

Hi there, On Palo Alto I have configured L3 interface and assgined ip address to it. I would like to connect this interface to the switch. The switch has an SVI configured with the port in the same vlan as the SVI. Can I connect the Palo Alto interface to the switch port which is configured with a vlan or do I need to make the switch port as a r...

Stable OS

I am currently on 7.0.7 and was thinking of upgrading to most stable version. Does anyone have any recommendation or cautions?

jdprovine by • L4 Transporter
  • 1938 Views
  • 1 replies
  • 0 Likes

Minemeld - Cannot create new Miner Node

Heya All, I've been testing out minemeld and have it a bit of a brick wall.. When I attempt to create a new miner node via CONFIG > NEW, it completes successfully but the node cannot be found listed under nodes so I cannot add it as an input to the inboudaggregator. I have reviewed all the log files and couldn't find any relevant errors.. Has...

Error Checking credentials - Gateway Timed out

Hi There, I have installed Minemeld on my Ubuntu Server 14.04.. And the service is up and running.. Wheneve I use the default Username and Password to logon to the console, it gives me an error "Error Checking credentials - gateway timed out".. I have also checked the file opt/minemeld/log/minemeld-web.log for errors ? but could not find ...

maltwist by • L2 Linker
  • 9320 Views
  • 4 replies
  • 0 Likes

URL Continue and Affect on Applications

Does anyone have any information on the functionality of an application say facebook or netflix on a phone (Android/IOS) where the traffic also goes through a URL policy that has those websites in a "Continue" function? Currently the Netflix application just "spins" on an IOS device I've tested so far.

PAN-200 CLI - limited commands

hii`m trying to troubleshoot some vpn tunneling connection dropsso i logged to the CLI execute some commands to troubleshoot the VPNs test vpn ike-sa gatewayshow vpn ike-sa gatewaytest vpn ipsec-sa tunnel none of this command exist even in configure modePAN-200PAN-OS-7.1any ideas?Thanks

pan200.jpg
Gav-Yam by • L0 Member
  • 3149 Views
  • 3 replies
  • 0 Likes

Captive portal + decryption + squid: https problem.

Hi,I try to configure path for users to access the Internet. I use Palo Alto and squid. But not everything works as I expected.The path:user---Palo Alto ---squid ---Internet.Squid is behind Palo Alto because of citrix users. I want to control citrix users access and in scenario: user---squid---Palo Alto--Internet, it's not possible. Squid change...

okress by • L1 Bithead
  • 3107 Views
  • 3 replies
  • 0 Likes

Resolved! Session Info on one Interface

I'm trying to find the session info on our outside interface; however I can't seem to find a command simular to show session info for looking at one interface.

BPry by • Cyber Elite
  • 2418 Views
  • 1 replies
  • 0 Likes

Resolved! Where is PAN-OS 7.0.0?

I have been running PAN firewalls for years and have been the person responsible for upgrading PAN-OS on them since PAN-OS 3.1.9. Each time, going from one release to a version in a different major release involved downloading the base version of the major release as well as the version I want to go to.For example, upgrading from 3.1.9 to 4.0.8...

VPN Tunnel down - Troubleshoot

Hi Admins,I need some help to troubleshoot our problem with the VPN Tunnels. We installed a Cisco to PaloAlto VPN tunnel. The PA in passive mode. But constantly the tunnels go down.Here are some log outputs:less mp-log ikemgr.log 2014-04-23 09:21:54 [DEBUG]: sockmisc.c:335:sendfromto(): sockname 122.152.XX.XX[500] 2014-04-23 09:21:54 [DEBUG]: so...

Hithead by • L4 Transporter
  • 19384 Views
  • 24 replies
  • 0 Likes

Resolved! Exclude address on Zone Protection

So we use a Barracuda and when it sends out for an update to it's spam filtering it gets identified on the zone protection as a Host Sweep; is their a way that I can exclude it's IP address from getting identified?

BPry by • Cyber Elite
  • 4158 Views
  • 2 replies
  • 0 Likes

Resolved! PAN‐OS 7.1.4‐h2 or PAN‐OS 7.1.4

Hello everybody After the security advisory PAN-SA-2016-0020).... I like to upgrade my actual version 7.1.3 to 7.1.4. But I like to know what are the meaning of -H2 and what is the differences between both versions. Best Regards Gonzalo

SOC_CSG by • L4 Transporter
  • 3005 Views
  • 2 replies
  • 0 Likes

applipedia categories

Sorry if this doesn't belong in this location. I see in the applipedia that the applictions have a description. Does such a description or definition excist for the categories and more specifically the subcategories? For example, what is the difference between social-business and social-networking sub categories? Mark

mp34549w by • L1 Bithead
  • 5907 Views
  • 4 replies
  • 0 Likes

Query regarding Dual ISP through 2 VPNs

Hello, Trying to verify fail over using redundant tunnel at two different sites but it does not work properly.Methods tried to test: 1:disabled the IPSec tunnel on one end, remote end which was monitoring the link failed over and chaned the routing table but the local PA kept the same route in the routing table. 2: changed the IPsec profile on o...

Farzana by • L4 Transporter
  • 1844 Views
  • 1 replies
  • 0 Likes
  • 24447 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks