This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! HA peer split-brain recovery?

Hi Guys, l came across this nice article where Mivaldi explains what is peer split-brain https://live.paloaltonetworks.com/t5/General-Topics/What-is-Peer-Split-Brain/m-p/19825#U19825 I have a question. We don't have HA1 backup link configured and our Heartbeat Backup (mgmt port) were not reachable between to PAs. This is all to the switch issue...

Resolved! What is Peer-Split-Brain?

Hey all, I want to start off saying I love Palo Alto's, they are AMAZING! With that out of the way, I wanted to say I recently got a Device RMA'd and the process went amazingly smooth, and I actually was able to completed a HA peer PA-500 in less time then it took my provider to get my a digital key for some software! This was the guide I fo...

Zewwy by • L3 Networker
  • 27676 Views
  • 7 replies
  • 0 Likes

Resolved! HA PA-5050 Alerts

Hello All, Guys could you help with this. PA-5050 Active/Passive setup. Received an alerts. Details below: Active: 2016/08/25 01:02:28 info ha session 0 HA Group 1: Completed session synchronization with peer2016/08/25 01:02:25 info ha session 0 HA Group 1: Starting session synchronization with peer2016/08/25 01:02:25 info satd satd-ha 0 SATD da...

Resolved! Using Users instead of Groups in Policies - Help please

Hello all, I'm new to PA but I'm really enjoying it...anyway, I've read everything I could find aboud group mappings, and one very good link is https://live.paloaltonetworks.com/t5/Featured-Articles/Getting-Started-User-ID/ta-p/69321 .. but it only show how to use a group in a policy. Is it possible to use a "user" instead of a group in a policy...

zearth by • L1 Bithead
  • 5367 Views
  • 8 replies
  • 0 Likes

How to Allow File Downloads from a Specific URL

Hello all,Is there a way to allow file download/upload from a specific URL? We currently block most file downloads/uploads however we have specific website that users upload and download attachments toover https. Thank you all for your help!

security policy order not working.

I have a policy from trust to untrust any any allowed. I have cloned this policy and put on top of this with address -test and deny 2 applications. This address is an ip for eg. 192.168.1.26 which is reserved in dhcp. But I can see apps being access via any any policy. Should the address be blocked using block policy.

No direct access to local network

Hi team, Good day!As I have understood, this feature will provide compulsary full tunnel and all my traffic will be set to inspection by firewall. I won't be able to access anything local. Can anyone confirm.

yadsingh by • L2 Linker
  • 5195 Views
  • 2 replies
  • 0 Likes

CLI question - What's the difference between: "receive errors" and "receive incoming errors"

Hi There, We haev aggrgate interface called ae2, and we have some problems with the traffic related to this interface so we run the commnand show interface ae2and show interface ethernet1/3 (which is one of the interfaces inside ae2)(the ouput is down) can someone please tell me the difference between: "receive errors" and "receive incoming erro...

reshef by • L1 Bithead
  • 9134 Views
  • 5 replies
  • 0 Likes

best design for a small network

Good morning, We just got a Palo Alto Firewall for a small testing lab with several virtual servers and clients. The firewall will be then connected between the lab and our ISP gateway. Most of the network traffic will be internal, since the clients will be connecting to the servers with a switch, and the switch will then be connected to the FW....

Perseus by • L1 Bithead
  • 4228 Views
  • 4 replies
  • 0 Likes

VRRP other devices

Hello Guys,I´m new in the world Palo Alto, my company partner is now Palo Alto. I have not found documentation, but it is possible to utilize protocol VRRP in PA-5050 with equipment other manufacturers? Thank you.

Default Management Ports in PAN OS 7.1

Hi all The standard guide for configuring a PANW Firewall to allow access to HTTPS/SSH etc from the outside has been this link: https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Change-the-Default-Management-Port/ta-p/62333 But with the release of PAN OS 7, the provided instructions no longer work. A loopback interface cannot sh...

Resolved! www.myhomeenergy.org.uk

Hi guys, Can anyone do me a favour and navigate to http://www.myhomeenergy.org.uk on IE through a Palo. Does this work for anyone, or do you get a "Page not displayed"? Kind regardsJack

DNS Sinkhole Intended Destination

I've configured a DNS sinkhole in our PAN firewall, and it's helped our department identify machines that are trying to reach out to malicious domains and such. Is it possible to identify the original, intended, destination that the user was attempting to reach when they became innfected?

Resolved! Scanning AntiVirus through SMB

Hi guys, As a "test" I have isolated one of my test servers so that all traffic flows through the PA-500.On this test machine I installed IIS and set-up a simple ftp and websiteThis website folder is also accessible via a share. The policy rules to and from this test server hold the AntiVirus Security Profile with both http, ftp and SMB to "def...

Lync (Skype for Business) Across Organisations

Hi guys, Is anyone else having issues using Lync (Skype for Business) when messaging, or sending file transfers, to someone in a separate Skype Organisation in an external network? Not sure if this is a bug or not, as the application is being seen as Incomplete, and looking at Packet Captures the SYN ACK isn't being received. Kind regardsJack

  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks