This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Disble GlobalProtect Agent on internal - corporte lan

Hi, is it possible to disable the globalprotect agent autoconnect on the corporate lan ? scenario:-outside the corporate lan the vpn connection must be autoconnecting to the globalprotect portal to enforce webfiltering etc..- inside the corporate lan, the vpn connection should be disabled. is there any option / advice ? thanks

edv by • L0 Member
  • 2195 Views
  • 2 replies
  • 0 Likes

"Facebook-apps" And "Facebook Chat" block

Hi all, Appreciate if you can guide me to block facebook-apps and facebook-chat in Palo Alto but allow other facebook features. I already implemented it in Application layer but failed, is there something i am missed? I am using PA-3020 and 7.0.3 version. Application Version : 591-3403 (06/25/16)

Service route destination option

What is the purpose of adding destination in service route?We have a default gateway in management interface config and we also have specific route in vr so why we need it?

hrsingh by • L0 Member
  • 3931 Views
  • 5 replies
  • 0 Likes

NAT after Proxy

Hi I have to set up a PA-200 as a NAT. That it self would not be the problem but between the PA-200 and the modem is a Proxy. I have no information about that proxy. The only information i have about the network is the IP settings given by DHCP. Is it somehow possible to setup the NAT with just that information and no change to the existing net...

Tiesto by • L0 Member
  • 2375 Views
  • 1 replies
  • 0 Likes

Resolved! How to block www.youtube.com completely

Dear All, Appreciate if you can advise how to block www.youtube.com completely. I have try using URL-Filtering and application layer level but still failed. I am using PA-3020 OS version 7.0.3 Imran

Resolved! arp not found

Yesterday I attempted to move our Internet connection from a copper interface on ethernet1/1 to fiber optic on ethernet 1/13 on a Palo Alto 3020. I ensured both interfaces were members of the same security zone and modified the Default route of default-vr to use ethernet 1/13 instead of 1/1. While I and the NOC technician confirmed the fiber p...

Resolved! Reduced bandwidth after 7.1.2 upgrade

After the upgrade to 7.1.2, I've notice that my bandwidth has reduced by 80% over a Metro E Gig connect. Any one else seen this problem or has a resolution for it?

ITICID by • L1 Bithead
  • 5380 Views
  • 5 replies
  • 0 Likes

Resolved! RADIUS authentication: MS-CHAP v2?

Currently, my PA-3050 devices (PAN-OS 6.1.12) utilize RADIUS authentication. I know that this uses the completely unencrypted PAP protocol. I have asked PAN about MS-CHAP v2 support in the past and was told that the device must be placed into FIPS mode in order to gain the ability to do RADIUS authentication over MS-CHAP v2, but by putting a de...

Multi AD Account login - Captive Portal

Hi, Can we limit the login per account using Active Directory as an authentication profile at Palo Alto Captive Portal? I believe by default, you can login using a single AD account with multiple devices.

Error with PDF Reports

when i do a test email for the email profile it successfully delivers the email. however in my system logs I get this error. "failed to email pdf reports to #####@#####.com for email profile #####" any ideas?

alkajazz by • L0 Member
  • 2034 Views
  • 1 replies
  • 0 Likes

Resolved! User based ssl decryption

Hi, I try to test ssl forward proxy decryption. It works fine if I use IP address as a source but if I use Users(domain) as a source it doesn't work. I can't use IP's for testing because our IP's floating. What I need to check in configuration? Toni

ToniE by • L2 Linker
  • 8869 Views
  • 12 replies
  • 0 Likes

Resolved! GlobalProtect 3.0.2 setting VPN DNS on WiFi adapter

Hi, I'm having a single client, running Windows 10 Pro, that we're having issues with.When the user connects to their network at home, they are unable to connect to VPN, and it seems like the issues is caused by GlobalProtect setting the WiFi adapter's DNS-address to that of the VPN proxy DNS. I have tried against mobile hotspots, and the same i...

arvesynd by • L3 Networker
  • 12172 Views
  • 8 replies
  • 0 Likes

Resolved! QOS & Aggregate Interfaces

Hello,In our QOS Aggregate Eth. Interfaces we cannot assign an egress value greater than 1000.(LACP Bundle is 2 x 1Gbit on eth4 + eth5)Why ?Do we throttle down throughput to 1 GBit/sec. in the Aggregate ?Shall we leave egress value in profile and Interfaces “0” ?no Feature description found in “in What's New in PAN-OS 7.0”

rekuhn by • L2 Linker
  • 3106 Views
  • 1 replies
  • 0 Likes

Resolved! Globalprotect client authenticate with a certificate not working anymore

Since we use our Palo Alto firewall, our users there Global Protect Client authenticate with the firewall through a certificate that is deployed thorugh Active Directory. Our Global Protect Client version is 3.0.2.Since we updated our Pan-Os version to 7.0.6 this method of authentication does not work anymore.THe client tries to authenticate and...

PA.JPG
PA_Portal.JPG
ZEBIT by • L3 Networker
  • 5582 Views
  • 9 replies
  • 0 Likes
  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks