General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Content translations are temporarily unavailable due to site maintenance. We apologize for any inconvenience.

General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 488 Views
  • 0 replies
  • 2 Likes

Resolved! VPN IPSec / SSL

Hello,

i have the problem with understanding How my VPN works.

 

I have created one portal and gateway for all users profile and I generate for all of them unique certifcate.

 

When i look in to Remote Users table I see that some of users uses SSL an

...

ITBT by L1 Bithead
  • 2966 Views
  • 1 replies
  • 0 Likes

Does Palo Alto support Reverse Route injection?

As title, does Palo Alto support something like CISCO "Reverse Route injection" which can inject a /32 route to the campus network for a dial-in user? Or can I create a /24 loopback interface for VPN users and redistribute the /24 to campus network?

...

Slow Network Traffic Using Global Protect

Hi,

 

We are experiencing high latency when using Global Protect. It peaks to 1000ms. We tried to use Cisco VPN to isolate the problem and latency peaks at 90ms. We removed security profiles that may cause latency but it did not work. We also noticed

...

Automation of a vsys configuration

We would like to automate the configuration of a new vsys, uisng inputs from a file or script with the required information, using either the set commands or the API.

Has anyone attempted to do this, and what is the best way and how to gather the req

...

dwmaas by L2 Linker
  • 2648 Views
  • 1 replies
  • 0 Likes

Resolved! Allow one URL out of many sharing an IP

We're faced with a bit of a challenge. We blocked a GoDaddy-Hosting IP for sending malicious traffic to our campus. Faculty later complained that a site they rely on is hosted with the same IP. I've attempted many different configurations with IP fil

...

rcaduser by L0 Member
  • 2122 Views
  • 2 replies
  • 0 Likes

Web UI authentication LDAP fails

Hi All,

 

I have configured everything correct. But no entry in LDAP server security logs while I try to login paloalto Web UI using LDAP profile.

 

 

Here at pan I can retrieve the all group user. I have configured the auth.

Profile to 'all' entry i

...

Javith by L3 Networker
  • 3972 Views
  • 4 replies
  • 0 Likes

Adding Tag Information to Email Alerts

Currently we have our Security Policies setup in a way that the name of the rule is the server and the tag identifies what resource is being accessed (URL).  As it is when I receive an alert of malicious intent on a rule it sends me the Rule name and

...

greeng by L2 Linker
  • 2245 Views
  • 1 replies
  • 1 Likes

Resolved! Virtual PA

Is there a URL that can I can download a evaluation Virtual PA from so that I can try a few configuration on it

rather than trying it on the live physical appliance.

 

RC-BHF by L2 Linker
  • 2303 Views
  • 2 replies
  • 0 Likes

Resolved! Network requirements for HA clustering

Hello,

is there any document that describes network requirements for clustering two firewalls. Especially how far apart two firewall can be (latency, delay etc.)
Is there any design scenario where two firewalls on two different sites can be clustered

...

Resolved! HTTP Headers in Threat Log?

Hi,

 

is there any possibility to see the HTTP Headers in Threat Log? For example i want to protect a shared hosting environment and on the threat log ( vulnerability profile, WordPress Login BruteForce Attempt) i can only see "wp-login.php" as the "

...

TP-Log.png
iweltag by L2 Linker
  • 3051 Views
  • 3 replies
  • 0 Likes

Resolved! GlobalProtect with 2 NICs

Here is an interesting question:

 

If a system has two fully configured NICs with internet connectivity, which interface does GlobalProtect use establish its connection to a Palo Alto gateway?  How can we select which NIC it uses?  Is it something th

...

mmclimans by L3 Networker
  • 3530 Views
  • 2 replies
  • 0 Likes
  • 23712 Posts
  • 110 Subscriptions
Top Solution Authors
Top Liked Authors
Labels