This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Arbitrary commands issue on ansible

Hi; While Executing Arbitrary commands like (eg: show lacp aggregate-ethernet all, show chassis status ) via ansible playbook its not getting exact output as we getting in paloalto console output some attributes are missing, I am using the paloaltonetworks.panos.panos_op modules for generating the ansible report. Is the any other spe...

URL Filtering issue

Hi All, So i'm trying to whitelist a site that was tagged as 'parked' by PAN-OS. i added this to a custom URL category, and configured the URL Filtering profile to allow/allow. The site is still getting blocked. To get around this, i filed a request to reclassify the site(to be fair, the update was very quick). This concerns me, as a a lot...

Negating an Argument for XML API Query

I am essentially trying to query the XML API for the active firewall to grab out operational logs using the below query except I would like to NEGATE the application so that I am grabbing out the logs that do not include that application type. Right now as it is written below, I am grabbing out ONLY the logs with application type "example-applic...

Palo Alto and Aruba Clearpass integration

Can someone please point me in the direction of any documentation for integrating PA firewalls with Aruba Clearpass. Understand Clearpass has a direct path into the API without the need for any programming?

jlucking by • L0 Member
  • 25418 Views
  • 9 replies
  • 1 Likes

GUI not responding

Hi All! after logging in the GUI not works anymore, i tried to restart the web service via CLI using the command 'debug software restart process web-server', but nothing changed. Can anyone give me some tips? Thank you!Regards,Daniele

DKanta by • L2 Linker
  • 24773 Views
  • 4 replies
  • 1 Likes

getting more global counters through SNMP

there are a bunch of counters available through SNMP, for example the amount of active sessions at a specific moment PAN-COMMON-MIB::panSessionActive.0 = INTEGER: 2 I am looking for the overall amount of sessions created on the firewall, with the intent to graph that in Grafana. This is reflected in the global counters: > show counter global ...

frigault by • L1 Bithead
  • 1613 Views
  • 2 replies
  • 0 Likes

PA410 Version: 10.2.7-h3 does not send logs to Panorama

Hello, after upgrade to version 10.2.7 h3 the Pa410 does not send logs to panorama, I have tried several versions but in many of them it does not do the autommit because there are bugs recognized by Paloalto. Do you know any stable version for this? Thanks a lot Regards

Alpalo by • L4 Transporter
  • 7372 Views
  • 14 replies
  • 0 Likes

Resolved! HA Link Monitor Issue

Hi everyone! I am having some confusion on HA Link Monitoring and Failover. I did exactly the same thing with video courses and Palo alto document guide but it still doesn't work For context, i am monitoring my eth1/2 and eth1/3 for failover. So i shut down the G0/0 interfaces of the routers directly connected to them and still there's no fail...

renzanjo11_0-1725417374901.png
renzanjo11_1-1725417398285.png
renzanjo11_2-1725417418512.png

Difference between 2FA certificate configuration methods

Hi folks - very grateful for some support on this one. I've been led to believe that establishing 2FA on GlobalProtect using credentials and certificates as the authentication methods requires setting up a certificate profile and selecting "No" on the setting "Allow Authentication with User Credentials OR Client Certificate". My questions is, sh...

Port fowarding from internet to inside server

I am trying to setup port forwading from spacific internet IPs to a server inside the firewall. This is for RDP access. We are using port 9999 to hit the firewall and translating that to 3389. Here is the NAT and Security policies I have. When I look in the logs it looks like it never hits the security rule and it says the application is incom...

RayWebster_0-1725379347129.png
RayWebster_1-1725379392373.png
RayWebster_2-1725379510648.png

Recommended PAN-OS for 5220

We are currently running version 10.2.9-h1 and i would like to know what the prefered recommended version to upgrade too? Also why does palo alto deny me access to this information when i have an account with them? I upgraded to 10.2.11 but this caused service impact. All our hosts dropped every hour on the hour until i reverted.

Request to Remove High-Risk Status and Update Website Category for ice-aec.com

Dear Palo Alto Networks LIVEcommunity Team, I am writing to address a concern regarding the domain ice-aec.com, which has been flagged as high-risk by Palo Alto Networks Unit 42 Security. After conducting a thorough review, we believe that this classification may be due to certain components on our site that could be mistakenly identified as m...

ice-aec by • L0 Member
  • 1606 Views
  • 1 replies
  • 0 Likes

Export Information for a PA-460 Unit

Could someone at Palo Alto please provide the following information for your PA-460 unit (3 items total): 1. ECCN (Export Control Classification Number) 2. Harmonized Tariff Code (HTS Code) 3. CCATS information for this product - we need to see if you have a license exception on the CCATS We need to export two of these units from the USA to Mexi...

KathyG by • L0 Member
  • 1687 Views
  • 1 replies
  • 0 Likes
  • 24472 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks