General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Question about Palo Alto Networks Security Advisory (PAN-SA-2016-0004)

Hello, I have a question about this advisory. I would like to know the meaning about "prior" in releases affected. that "prior" means affected release is the inmediatly prior or all series of version (5.0.X, 6.0.X, 6.1.X, 7.0.X) ? Products Affected PAN-OS releases 5.0.17, 6.0.12, 6.1.9, 7.0.5 and prior Available Updates PAN-OS releases 5.0.1...

SOC_CSG by L4 Transporter
  • 2432 Views
  • 1 replies
  • 0 Likes

Palo Alto logs shown differently

Hi All, I have a query regarding Log monitoring. The logs for one user shows the entire subnet, where as for another user it shows that particular IP. May I know the reason behind it. Is there any setting that need to be changed or is it due to permissions.

Rravella by L0 Member
  • 2326 Views
  • 1 replies
  • 0 Likes

Max virtual routers?

Take the 3020 for example which can have a max of 10 virtual routers. Is that 10 VR's per vsys or 10 shared between any/all vsys's you have on the box?

mplewis2 by L0 Member
  • 3490 Views
  • 1 replies
  • 0 Likes

IMAP long tag anomaly

I know this was kind of asked here, and I was wondering if the best option would be to create a rule like the one mentioned in this post.. https://live.paloaltonetworks.com/t5/General-Topics/SMTP-long-MAIL-anomaly-Vulnerability-30392/m-p/2327#M1718 Since I am getting these almost everyday, and they seem to be always from one user account, an...

Zewwy by L3 Networker
  • 2358 Views
  • 1 replies
  • 0 Likes

Can not download Software or Dynamic Updates on PA-200 w/7.01-b19

I cannot download Software or Dynamic Updates on PA-200 w/7.01-b19 Cleared all logs and also reviewed tech note "How and When to Clear Disk Space on the Palo Alto Networks Device" Reviewed LiveCommunity and deleted files in the pcap directory and also the debug-log mp-log files. Anymore thoughts? --------------------------------- a082496...

Site to Site tunnels does not failover

Hi All, We have several site to site VPN tunnels built for different clients. We have PA500 in HA mode. When we do a failover, general traffic does succesfully failover to secondary, but the VPN tunnels does not failover and all the tunnels shows down. Any suggestions on how to resolve this.

Rravella by L0 Member
  • 4156 Views
  • 3 replies
  • 0 Likes

Global Protect Pre-Authentication driving me nuts

Hi. I'm trying to configure pre-authentication on my Global Protect portal. I've followed this document until I'm blue in the face, but every single time I attempt to logon to my test environment, I get GlobalProtect portal user authentication failed. Login from: AAA.BBB.CCC.DDD, User name: , Reason: client cert invalid, Auth type: pro...

darren_g by L4 Transporter
  • 2966 Views
  • 3 replies
  • 0 Likes

the ssl-vpn web page do not show up

PAN OS: 4.0.10> less webserver-log sslvpn-error.logdefault:1 main Error: Can't access DocumentRoot directory default:1 main Error: Ignoring bad directive "DocumentRoot" at line 181 in /etc/appweb/sslvpn.conf default:1 pool.1 Error: 404 "Not Found" for "/admin/Y-ivrrecording.php", file "/var/appweb/sslvpndocs/admin/Y-ivrrecording.php": ...

proestel by L1 Bithead
  • 6454 Views
  • 7 replies
  • 0 Likes

Resolved! hide global protect login page

Hello When we check disable login page, it returns 404 page not found on portal page. Is this expected behaviour ? is it possible to completeley disable the page. Regards

PanIst by L3 Networker
  • 4536 Views
  • 3 replies
  • 0 Likes

Mitigating risk of not decrypting "online storage and backup" URL category.

We've been having some issues with websites like DropBox, Hightail etc since configuring SSL Decryption. I believe this relates to a security technique called "Certificate Pinning". I've resolved the issue by adding the "Online Storage & Backup" URL category into a no-decrypt policy but it concerns me that opening up the entire category is a...

Mitre10 by L0 Member
  • 4818 Views
  • 3 replies
  • 0 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
Labels