This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Decrypting Dropbox

Hi,I want to decrypt Dropbox but it doesn't work. I have a catch-all decrypt policy that decrypts any-any SSL. It works fine except for Dropbox. My understanding is that Dropbox is on the PanOS internal exception list so decryption is supposed to be disabled automatically for DB. Looking at my traffic logs, I can confirm that application dropbox...

Global Protect Routing Table

Currently for Global Protect we route all traffic through the firewall. Is there a way we can add IP’s to the routing table for GP clients only? For instance, add GoToMeeting IPs and have all that traffic go out the Internet. Is this possible?

rrau by • L3 Networker
  • 6441 Views
  • 1 replies
  • 0 Likes

K-12 - QOS with PARCC Testing

Has anyone looked into doing any QOS for the PARCC assesment testing? Right now I'm not doing any QOS on our 5050, but think it would be a good idea to do something so the testing gets priority over some staff member watching Netflix during their break period.

bbilut by • L3 Networker
  • 2161 Views
  • 2 replies
  • 0 Likes

user to ip mapping with LDAP

I have a pa 3020 running 6.0.8 doing LDAP lookups to multiple edir servers, I have many users that PA shows as unknown but when I look on the server I see they are logged in x.x.x.x Why does this work for some but not all? I have done the following: debug user-id refresh user-id agent all debug software restart user-id show user server-monit...

ccboe by • L0 Member
  • 2288 Views
  • 2 replies
  • 0 Likes

Lower fanspeed on PA-500 so it can be used close to a desktop environment (or at home)?

With PA-200 there is a command similar to: set system setting fan-mode auto in order to throttle the onboard fan(s) so it doesnt rev up to max rpm and stays there as it normally might do. But this command doesnt seem to exist for the PA-500 series or am I missing somthing here? All I could find is (output from: show system environmental)...

mikand by • L6 Presenter
  • 3437 Views
  • 2 replies
  • 0 Likes

Resolved! Dedicated log collector licensing

How are dedicated M series log collectors licensed. We are planning a deployment with two M-100 appliances in an HA configuration. If we add a third M-100 as a dedicated log collector, do we need a third license for Panorama?

Lepton by • L0 Member
  • 4644 Views
  • 1 replies
  • 0 Likes

Resolved! User-ID redistribution SSL error

Hello, I am trying to configure to 2 PA to share their user-id data. I used the following guide: https://www.paloaltonetworks.com/documentation/60/pan-os/pan-os/user-id/configure-a-firewall-to-share-user-mapping-data-with-other-firewalls.html#61291 Version is 6.0.10 - Communication is done through mgt interface - Both User-Id and HTTPS are...

Marck.To by • L1 Bithead
  • 4586 Views
  • 2 replies
  • 0 Likes

User Activity Reports on Panorama

When we generate a UAR (Using Monitor/PDF Reports/User Activity Report) on Panorama for a particular managed firewall, we do not get any broswing summary sections in the report. If the same report is run on the firewall itself, we do get that information. What do we need to do get that information showing up in the Panorama reports? We do run ...

Nig by • L1 Bithead
  • 2646 Views
  • 2 replies
  • 0 Likes

Resolved! Site which should be blocked URLF not being blocked after SSL decryption

We are blocking a particular category of URLs (say gambling). When we access the unecrypted site it is blocked as expected. When we add https to the URL and browse we are not blocked. I can see in the logs that access is allowed by the FW, even though it hits a rule with a URLF profile that should block the category. The category for the SSL c...

ISP failover in PanOS 7.0.4

Hi, We are moving from Juniper ScreenOS SSG firewalls to PanOS 7.0.4, 3020 clustered firewalls. On our Junipers we make use of a feature called track-ip for Interface failover between ISP's...This basically works by pinging a far device on the primary link, and after the PING failure limits being exceeded, the default route changes to that...

Resolved! Dynamic Block List Question.

Hello Community, Blacklist (such as IP Void or SpamHaus) with a suggestion that we should block that IP. I'm hoping there's a way that we can leverage such a blacklist - for example, to have a rule in the FW that references an existing Blacklist (such as IP Void) and is able to dynamically update based upon the published list. I know that t...

Apadilla by • L3 Networker
  • 8339 Views
  • 8 replies
  • 0 Likes

Resolved! Agentless USER-ID - no matched record

Good Day I have a PAN-5050 configure for agentless USER-ID to a W2K8 AD. We were getting user ids/ips in the logs but now we're not. The server-monitor is connect and now errors or failures to connect. When I do the cli commands (show user userids, show user ip-user-mapping all) we see the user ids/ip list, but is I do a (show user ip-user-map...

burtond by • L2 Linker
  • 3935 Views
  • 4 replies
  • 0 Likes

Resolved! Botnet report full of cloud.typography.com entries

My weekly botnet report is full of entries like: "Repeatedly visited (32) the same malicious URL cloud.typography.com/" I've checked this URL in the database and using the CLI, and it shows as computer-and-internet-info Several tools I've used to check the site show nothing malicous. I'm thinking maybe categorization is the wrong place to loo...

holtcg by • L1 Bithead
  • 6499 Views
  • 2 replies
  • 0 Likes

Resolved! Deny & Allow

I have a rule that allows the administrators remote desktop access to our physical domain controller. While reviewing the traffic logs I can see that the PA is show allows and denies for the exact same traffic from my PC to the domain controller using remote desk top through the exact same rule - how can that be?

jdprovine by • L4 Transporter
  • 2542 Views
  • 2 replies
  • 0 Likes

Resolved! Renew digicert certificate

Hi, The certificate we use for GlobalProtect needs to be renewed and I have just paid the renewal and received the file from digicert.. In my PA500's Device Certificates the expired certificate has two lines: The second line's certificate name has 'PEM' as suffix. I got a .P7B file from digicert.com with the renewed certificate. How do I...

  • 24379 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks