This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Error in threat signature, how do I report?

Hi All, I recently came across an odd log for a customer of mine and after much analysis and research I have found that it is actually a false positive on Palo Alto's side regarding the signature of a threat. How do I go about report this? I am unable to open cases my account isn't associated with a company. Thanks in advanced for any help!

Resolved! Why does the ip-user-mapping distinguish DP and MP?

Hello suddenly, I am wondering that ip-user-mapping have two table[DP, MP] After connecting to AD Server to get Security logs, Why PAFW get that table seperatly,? I think there are reason, and I don't know well about relating to DP, MP If DP was restart about someting problem, Would PA be able to get user information through MP? Do I think...

John_Lee by • L2 Linker
  • 5891 Views
  • 4 replies
  • 0 Likes

2016 - Live Community survey. Let us know what you think and get a chance to win a VM-100!

Hello Live Community users, You might have seen it in your inbox...our 2016 Live Community survey is out! We're conducting this survey to improve our community and your input would be greatly appreciated. If you have not replied yet, click here to start the survey. It should only take 5 minutes and you could win a Palo Alto Networks VM-1...

carnould by • L4 Transporter
  • 2724 Views
  • 1 replies
  • 1 Likes

Resolved! In which vsys to place aggregate interfaces?

Hello, I have multi-vsys system with multiple aggregate interfaces (L3). I am going to configure multiple VLANs on each aggregate interface and place them in different vsys. My question is where to place the aggregate interface itself. I was planning to leave it in admin vsys1, but is this supported design? Thank you.

HAL9000 by • L1 Bithead
  • 3928 Views
  • 3 replies
  • 0 Likes

PA and AD Integration

My PA is experiencing a lag between when user accounts are modified in the AD group used for VPN authentication and when the PA begins enforcing the new account settings. Is this fixable? What is the maximum lag that I should be seeing? Is it possible for an account to be disabled in AD and there be a lag between when the user can no longer l...

RustyPA by • L1 Bithead
  • 2155 Views
  • 1 replies
  • 0 Likes

Resolved! 3050 - Maximum Number of Routes & ProxyID

Hello All: We have (2) 3050s in an Active/Passive & we do a ton of VPNs. As such, we have a lot of static routes & ProxyIDs. Can someone tell me the maximum # of each that the 3050 supports? We're running 6.1.4 now - gonna get to 7-something when we can get the maintenance window. I asked PAS & they told me 5,000. I see that # for VP...

Resolved! How to request new URL Category

The UK Government has informed Local Authorities that they should implement measures to prevent radicalization and extremism, which includes filtering Internet access available in LA provided public facilities, such as Libraries, and Schools. As the support provider of the firewall services in one such authority, we have been asked to implement ...

Nig by • L1 Bithead
  • 4248 Views
  • 4 replies
  • 0 Likes

Resolved! Outbound SSL Decryption Capabilities

I know outbound SSL decryption can work when a client inside the network is accessing a secure website on the internet. But can SSL decryption work when a client on the internal network attempts to make a vpn connection to a vpn server using an SSL VPN connection elsewhere on the public internet? Can SSL decryption intercept that connection an...

RustyPA by • L1 Bithead
  • 3483 Views
  • 2 replies
  • 0 Likes

Authenticated threat feed - Miner node

Hi all, A customer of mine subscribes to a threat feed where they need to authenticate (using web form) to recieve the inputs. Maybe I have missed this, but I couldn't see any predified miners to achieve this? Thanks, Tim

tkirk by • L1 Bithead
  • 5092 Views
  • 1 replies
  • 0 Likes

Application Dependencies

Hi all,First time post. If you add all the required dependent applications to security policy (e.g. for Skype: msn-base, ssl & web-browsing), does this then allow all of those apps out dependent of if the primary Skype app is being used for that policy?i.e does it allow msn-base, ssl & web-browsing from the source IP address to the desti...

njuttner by • L1 Bithead
  • 4072 Views
  • 5 replies
  • 0 Likes
  • 24415 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks