This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

WildFire & Office Documents/PDFs - Limitations?

We currently use Wildfire on "PE Executable" filetypes on our PA-500. I'm interested in using it against Office documents and PDFs as those are clearly a major threat vector. Thing is, whatever model of Palo Alto I look at, they all seem to show low WildFire limits which makes me question how they cope with things like SMTP where there may b...

Block unwanted traffic on port 1720

Hi, I have a voice/visioconference system available on the internet (via NAT-ed IP) using H323. So of course the port 1720 is open and reachable from outside, without restriction on IP addresses because users must be able to reach the system from their smartphone App. My problem is that sometimes, some traffic on port 1720 (shown as H.225 in t...

NVogel by • L0 Member
  • 4244 Views
  • 2 replies
  • 0 Likes

Resolved! Email alerts for threats.

Do I need Panorama to set up email notifications on high and critical severity threats? I know you can set up sheculed reports, but what if I just want to receive an email when a threat is blocked or detected, or what have you.

Netwerx by • L2 Linker
  • 6594 Views
  • 3 replies
  • 1 Likes

What is the misc field in the threat syslogs supposed to show when the subtype is vulnerability?

Hi everyone, I'm sorry if this has been answered elsewhere-- I'm new to this livecommunity thing so, although I tried to search for an answer before posting-- I may have missed something... I'm running PanOS 6.1.7 and I can't find anything that explains what gets logged in the 'misc' field of the threat syslogs when the subtype is 'vulnerabili...

lawinter by • L0 Member
  • 4521 Views
  • 1 replies
  • 0 Likes

SRX Config - XML Invalid

Since upgrading to MT 3.2.4 I have been unable to import the XML file from a SRX . Previous to this release (3.2.1), I had no issues with the same XML. However, it is not working on 3.2.4 The XML file is correct with the configuraiton tags at the start and end of with no attributes. I have created a number of projects, deleted them and res...

indysogi by • L2 Linker
  • 3555 Views
  • 1 replies
  • 0 Likes

Meaningful User Reports

PA-500 Software Version 7.0.3 How do I generate meaningful user reports, or how do I better interpret the reports that are available. With a User Activity Report I get application statistics, browsing summary by category etc. But I can't say "User domain\user was on these sites between 10am and 11am when they should have being working". ...

PinkCup by • L0 Member
  • 3085 Views
  • 2 replies
  • 0 Likes

Resolved! Rudimentary TCP Session and Monitor Question

I feel like I should already know this, but I just need a sanity check. I have a rule that allows host A to B via tcp/900. So host A starts to communicate via host B via that port. The firewall allows it and a session is created. Now, assume A and B stop talking but don't formally close the session. After the default timer, the PAN closes ...

mrcs by • L0 Member
  • 3696 Views
  • 4 replies
  • 0 Likes

third party VPN clients with PanOS 7.0.3

I was curious if anybody else has seen this issue, or could perhaps try to duplicate it. I have a problem with third party VPN clients after upgrading from PanOS 6.1.6 to 7.0.3 on our PA-3020s. Specifically, the built-in IPSec VPN client on Mac OSX (10.11/el capitan) and iOS (9.1). They can connect, but a simple ping test shows packet loss n...

SSL Decrypt

Hi We have a guest wifi that availave to all and sundry to be used by using their own equipment. We would like use SSL Decryption on this. The main issues is that for guest device we have no control over this to be able to install the CA cert onto it. Is there any solution to this , other than issues instruction to all users on how to inst...

RC-BHF by • L2 Linker
  • 3932 Views
  • 2 replies
  • 0 Likes

Can I choose what categorizes I choose for allowing SSL-Opt Out Pages?

Hello All, I am after some help with SSL decryption? We currently want to decrypt ALL SSL traffic. However moving forward there are 3 catorgies we wish to bypass SSL decyption for BUT only with the use of the opt-out pages not a blanket SSL catorgoy bypass. Is this possible on the Palo? We are running currently 6.1.3 but can upgrade to 7...

Resolved! Search GlobalProtect Users on Portal and Satellites

I have several satellites and one portal. I have a lot users connected to the satellites and portal. From a CLI console, I would like to query for GlobalProtect users from a centralized console. Right now, it is a pain because I have to open a CLI console for each satellite/portal and send a command to each device to find information on a ...

mmclimans by • L3 Networker
  • 2516 Views
  • 1 replies
  • 0 Likes

we're starting to get "WildFire Public Cloud channel registration received invalid cloud info"

SYSTEM ALERT : high : WildFire Public Cloud channel registration received invalid cloud info" errors all of a sudden. No change on our side. varrcvr.log only reports 2015-11-24 08:25:24.386 -0500 Error: pan_fbd_fwd_report_process(pan_fbd_fwd.c:4029): pan_fbd_cloud_getreport() failed" 2015-11-24 07:33:35.334 -0500 check wildfire license: vali...

ulti by • L3 Networker
  • 5858 Views
  • 6 replies
  • 0 Likes

Resolved! AWS Servers trigger Vulnerability

We are seeing a high number of HTTP Non RFC-Compliant Response Found Signature ID : 32880 CVE-2010-2561 All are logged from aws servers, evenly distributed across a large number of servers - 173 in one hour, each with 300-500 hits. I have packet captured the vulnerability and it is logging a seemingly innocuous XML file. I suspect this is ...

djr by • L4 Transporter
  • 5763 Views
  • 2 replies
  • 1 Likes
  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks