General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4126 Views
  • 0 replies
  • 0 Likes

Can not download Software or Dynamic Updates on PA-200 w/7.01-b19

I cannot download Software or Dynamic Updates on PA-200 w/7.01-b19 Cleared all logs and also reviewed tech note "How and When to Clear Disk Space on the Palo Alto Networks Device" Reviewed LiveCommunity and deleted files in the pcap directory and also the debug-log mp-log files. Anymore thoughts? --------------------------------- a082496...

Site to Site tunnels does not failover

Hi All, We have several site to site VPN tunnels built for different clients. We have PA500 in HA mode. When we do a failover, general traffic does succesfully failover to secondary, but the VPN tunnels does not failover and all the tunnels shows down. Any suggestions on how to resolve this.

Rravella by L0 Member
  • 4015 Views
  • 3 replies
  • 0 Likes

Global Protect Pre-Authentication driving me nuts

Hi. I'm trying to configure pre-authentication on my Global Protect portal. I've followed this document until I'm blue in the face, but every single time I attempt to logon to my test environment, I get GlobalProtect portal user authentication failed. Login from: AAA.BBB.CCC.DDD, User name: , Reason: client cert invalid, Auth type: pro...

darren_g by L4 Transporter
  • 2826 Views
  • 3 replies
  • 0 Likes

the ssl-vpn web page do not show up

PAN OS: 4.0.10> less webserver-log sslvpn-error.logdefault:1 main Error: Can't access DocumentRoot directory default:1 main Error: Ignoring bad directive "DocumentRoot" at line 181 in /etc/appweb/sslvpn.conf default:1 pool.1 Error: 404 "Not Found" for "/admin/Y-ivrrecording.php", file "/var/appweb/sslvpndocs/admin/Y-ivrrecording.php": ...

proestel by L1 Bithead
  • 6182 Views
  • 7 replies
  • 0 Likes

Resolved! hide global protect login page

Hello When we check disable login page, it returns 404 page not found on portal page. Is this expected behaviour ? is it possible to completeley disable the page. Regards

PanIst by L3 Networker
  • 4399 Views
  • 3 replies
  • 0 Likes

Mitigating risk of not decrypting "online storage and backup" URL category.

We've been having some issues with websites like DropBox, Hightail etc since configuring SSL Decryption. I believe this relates to a security technique called "Certificate Pinning". I've resolved the issue by adding the "Online Storage & Backup" URL category into a no-decrypt policy but it concerns me that opening up the entire category is a...

Mitre10 by L0 Member
  • 4576 Views
  • 3 replies
  • 0 Likes

Resolved! A/A HA changes - looking for information on procedures

Hi - looking to make some changes to the HA configuration between 2x PA 5000s. First change: an HA3 link to an AE link on different interfaces in an A/A pair of 5000s. I'm wondering if there is a procedure anywhere for this? What would happen to an A/A pair if HA3 were to be reconfigured by panorama? Connections are already in place just need ...

VPN with Windows Phone

Hello, I have been researching for information about how to configure Windows Phone with Paloalto. I did not find anything. Has someone found any working method for this? Thank you,

DNS Sinkhole not triggering for known malicious domains

Hello, has anyone had any problems with DNS sinkhole not triggering on PAN-OS 6.1.4 ? I have created a security policy for DNS traffic between a LAN side DNS server and a WAN side upstream DNS server, the Palo sits at the WAN edge between the two DNS servers. Attached to this security policy is an Anti-spyware security policy with DNS action...

Smi12 by L2 Linker
  • 8129 Views
  • 8 replies
  • 0 Likes

PAN-OS 6.x to 7.x Issues

We currently have Panorama with a total of 2 HA Pairs (PA3050's and PA3020's) deployed. We are planning to use Panorama to upgrade from our current 6.x software to 7.x. Here are some gental questions that perhaps someone who has done this before can answer: What would be a good estimate for how long the upgrade takes? Did anyone run into any ma...

Resolved! Palo Alto uses management self IP for requests

Hi everybody, I have an issue when generating requests from the PA itself: it always uses the management IP address as source. So in my client's architecture I need it to use the internal interface's IP address to get the internal DNS or the packet will never come back. Do you know how to do that? Thank you! Regards

Row data showing blank under acc

Hi Friends, Any idea why fews rows data at the end of second page showing blank under ACC tab application section? any idea what might caused this else any known issue with 6.1.10 version? Thanks in advance,

  • 24336 Posts
  • 124 Subscriptions
Top Liked Authors
Labels