General Topics

Resolved! A/A HA changes - looking for information on procedures

Hi - looking to make some changes to the HA configuration between 2x PA 5000s. First change: an HA3 link to an AE link on different interfaces in an A/A pair of 5000s. I'm wondering if there is a procedure anywhere for this? What would happen to an A/A pair if HA3 were to be reconfigured by panorama? Connections are already in place just need ...

VPN with Windows Phone

Hello, I have been researching for information about how to configure Windows Phone with Paloalto. I did not find anything. Has someone found any working method for this? Thank you,

DNS Sinkhole not triggering for known malicious domains

Hello, has anyone had any problems with DNS sinkhole not triggering on PAN-OS 6.1.4 ? I have created a security policy for DNS traffic between a LAN side DNS server and a WAN side upstream DNS server, the Palo sits at the WAN edge between the two DNS servers. Attached to this security policy is an Anti-spyware security policy with DNS action...

PAN-OS 6.x to 7.x Issues

We currently have Panorama with a total of 2 HA Pairs (PA3050's and PA3020's) deployed. We are planning to use Panorama to upgrade from our current 6.x software to 7.x. Here are some gental questions that perhaps someone who has done this before can answer: What would be a good estimate for how long the upgrade takes? Did anyone run into any ma...

Resolved! Palo Alto uses management self IP for requests

Hi everybody, I have an issue when generating requests from the PA itself: it always uses the management IP address as source. So in my client's architecture I need it to use the internal interface's IP address to get the internal DNS or the packet will never come back. Do you know how to do that? Thank you! Regards

Row data showing blank under acc

Hi Friends, Any idea why fews rows data at the end of second page showing blank under ACC tab application section? any idea what might caused this else any known issue with 6.1.10 version? Thanks in advance,

Connect TS Agents to UserID Agent

Is it possible to connect TS (terminal server) agents to the UserID agent and then have the firewall pull the IP/Portrange/Username from the UserID agent instead of each individual TS agent?

Resolved! Exporting log files from terminal server agent

Hi, I've got an installation where we have approx 500 citrix servers running the terminal server agent. The TS-agent has a log file located in the installation folder (debug.log), which I need to look at from time to time. To retrieve the log file I actually have to log on to each server. From what I've been able to find out, it is not poss...

Resolved! AD OU / ACL Rule

Can Palo Alto use computers identified in a specific Active Directory OU in an ACL rule? If so, how? Thanks in advance.

Resolved! OPenswan is it supported for vpn ipsec with palo

Hello someone implement openswan with palo if yes witch version did you used and how did you implement it?

Resolved! Cannot download PAN-OS version due to bissexstile year. Value error: day is out of range for month

Hi All, today one of our customer has tried to download and install PAN-OS version 6.1.10. Customer has currently installed version 6.1.4. This error appears: Error transcript: ------------------------------------------------------------------------------------------------- Successfully downloaded Preloading into software manager Tracebac...

Resolved! Vypr VPN

Hi, Has anyone used VYPR VPN. We are seeing users use this quiet a lot and they are bypassing the firewall to get onto whatever they want. We have submitted to PAN to create an application for this as one does not currently exist, but we need to block this in the mean time. I know we can create a custom application for this, but I am not e...

Resolved! Access to some posts being denied. Access to restricted areas of the portal.

Hello, everyone! Can someone please tell me what I need to do to be granted access to the restricted area of the portal? I am looking for information about compatible third party SFP and SFP+ transceivers for 5000 series. I tried to reach this link: https://live.paloaltonetworks.com/t5/Archived-KB/Archived/ta-p/59404, but my access was denied: ...

Resolved! Games consoles behind a PA-500

Good afternoon all,We are trialling a PA-500 at the moment and so far very impressed with the device. We have managed to configure everything we are likely to need to do through the firewall but this isn't a show stopping question/issue.We have multiple Xbox 360's and Playstation 3's here and the number will be increasing. We would like to be ...

SSL Descryption Windows 8

Hello everyone,I have a big problem with SSL decryption. I introduced it in my network and I sent certificate via GPO to all computers. On Windows 7 all is working but on Windows 8 I received information about a bad certifcate. Obvously I checked certificate container and all is fine but this doesn't work..