This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Zone Protection

HI I have a question related to zone protection. I am having a company doing vulnerability scanning on my system and I want to be able to disable zone protection only for the IP's of the scanner. What would be the best way to acomplish this? Any help much apreciated. At the moment there is one zone protection profile that is applied to my "Exter...

it.unit by • L1 Bithead
  • 7519 Views
  • 7 replies
  • 0 Likes

Content 571 Customer Advisory

Application and Threat Content version 571 was removed from the Palo Alto Networks support site at approximately 0230 PM PST on 24-MAR-2016, after discovering an issue with this content update and Panorama stability related to the Correlation Objects feature. In the interim, customers who have installed content version 571 and use Panorama for d...

Unknown.png
maurisy by • L4 Transporter
  • 26846 Views
  • 13 replies
  • 3 Likes

latest stable version of PAN OS

Hi All, I am looking for the latest PAN OS version that is being used( any pointers why it is good would be a plus) , i am looking to update my firewalls and Panorama. also any good links on how to absorb existing running firewalls in the panorama would be helpfull. Regards, ~Harry

Harshit by • L3 Networker
  • 5103 Views
  • 6 replies
  • 0 Likes

I don't see a facility to schedule a reboot.

HiI would really like to be able to schedule a reboot at a future time. We are in the process of migrating sites to Panorama from a a local configuration.The config has to be deployed through the single link into the office. This link is a BGP peer. Unless someone is on site then if we lose the BGP peering the device will be inaccessible. The co...

port 2000 and NMAP

I'm having an issue where any traffic through palo alto using destination port 2000 will create a tcp handshake and no more traffic will pass. I've talked to support and no traffic is being dropped by the firewall. i've added a rule to allow tcp 2000 as a service so it shouldn't be doing anything with the appid and no difference in behavior. A...

Mat_FA by • L1 Bithead
  • 9282 Views
  • 5 replies
  • 0 Likes

Automatic VPN Failover

Dear Friends, IF 1 ISP link goes down of operator END we unable to automatically forward to another ISP link. please suggest how to do this. i am using PAN-3020 with 1 ISP and Operator END cisco with 2 ISP. Regards Satish

Satish by • L4 Transporter
  • 4828 Views
  • 6 replies
  • 0 Likes

GlobalProtect Portal Banner Message

Would anyone have a simple example that would allow me to put a warning banner below the login table on the GP Portal page? I'm no HTML expert and have tried to follow some of the posts and documents here, but am not having any luck. I have made sure to set the custom login page in the portal configuration page, but the text I tried to add doe...

dan731028 by • L3 Networker
  • 2739 Views
  • 2 replies
  • 0 Likes

Resolved! SSL Decryption

Hello We have recentley tuned on SSL Decryption for some users. Since then we are getting some SSL sites that cannot be accessed due to cypher mismatch. It is something we were exepcting, but not the amount of URL this is happneing for. My question, is there a setting that I can turn on that will allow the site to be accessed if the SSL Decr...

RC-BHF by • L2 Linker
  • 3012 Views
  • 2 replies
  • 0 Likes

Multi-VR routes and security policies issues

I have an issue where we have mulit-VRs in place 1) default and 2nd) VR that is utilized for DMZ and untrust routes Both VR's share a common zone name "public" for example. I have issues routing where for instance I have my internal network segments in the VR's FIB's and my routed networks fail to return back through the correct interfaces....

CZaloba by • L0 Member
  • 3937 Views
  • 2 replies
  • 0 Likes

Global Protect DNS Suffix Not Propogating to Client

Hi, I have a strange issue where my Global Protect SSL Client connects to the firewall with no issues. I get the IP, the routes and the DNS servers but I don't get anything listed in the DNS Suffix entry. I have configured the DNS Suffix correctly under 'Global Protect Gateway', 'Client Configuration', 'Network Settings' and can even see the...

MHaran by • L1 Bithead
  • 8281 Views
  • 5 replies
  • 0 Likes

syslog configuration

Hi, I have attached my syslog configuration . but in my syslog i missed most of the logs . then assigned to the policy To forward all the logs , attached configuration what if i choose another facilty ? if i put one interface in tap mode can i forward the log to syslog server Thanks

Palo alto syslog server.png
server pofile.png
sib2017 by • L4 Transporter
  • 5662 Views
  • 4 replies
  • 0 Likes

Wildfire

So currently I am using wildfire but only choosing to forward the file. Is anyone using the block option? If so are what are the pros and cons?

jdprovine by • L4 Transporter
  • 4863 Views
  • 7 replies
  • 0 Likes

vwire & VLAN tagging?

Hi all,Is there any issue with configuring a vwire for both tagged and untagged traffic. For example use VLAN tag 0 AND whatever my real tags would be, like 1, 100, 200, etc. I'm assuming it will be fine since there is an option for 0-4094.Any issues or limitations I should be aware of? Thanks for your support!

BigIr0n by • L0 Member
  • 11328 Views
  • 6 replies
  • 0 Likes

User-ID Group Mapping for Multi Domain Single forest

Hi everyone. I'm trying to setup a User-ID installation for our multi-domain Active Directory environment. Here is a rundown on what we have DomainA = Workstations, groups, users, servers, etc. The main domain where everything is conducted DomainB = legacy domain where some user accounts are located. I've installed the User-ID agent on a Win...

  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks