This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4105 Views
  • 0 replies
  • 0 Likes

Dual NIC - IP Mapping Issue

This appears to happen at random to a random subset of users.Environment:> 160 AD DCs4x UIAs (2 - 80 DCs / 2 - other 80 DCs)Assume:All possible DCs that a user would authenticate to are being monitored by the agents.Scenario:When users with laptops come into work in the morning, dock and start their computer up. Their computers (Win7) have b...

Auto upgrade on OS

It looks like an upgrade for the os comes out about every other month, has anyone come up with a way to automate the upgrade process and can you recieve email notification of when new os's come out

jdprovine by • L4 Transporter
  • 2605 Views
  • 2 replies
  • 0 Likes

Resolved! Custom Report group by problem

Hello everybody! I am trying to make a custom report to see which users are using our VPN and when. I only need the user and the date, so using the database "Traffic log" is enough. I have only 2 columns selected: Source User, and Date. The run now shows what I want, so that part works. Now, I want to "Group by" Source User. I select it, clic ...

nsatc.net shows as spyware?

I have a ton of entries in my spyware logs for DNS attempts to nsatc.net Some digging suggests this is a site run by Microsoft related to Windows Updates. False positive?

PCI Vulnerabilities Report

Dear Friends, panos, panagent HULK hshah Steven Puluka hyadavalli mmmccorkleI have a doubt regarding PCI vulnerabilities scan and enable the signature for the same. when security team scan our WAN interface. he found below 1. SSL Certificate - Self-Signed CertificateVULNERABILITY DETAILSCVSS Base Score: 9.4CVSS Temporal Score: 6.9Severity: 2QID:...

Satish by • L4 Transporter
  • 15305 Views
  • 16 replies
  • 0 Likes

GlobalProtect Data File

I can't get the GlobalProtect Data File to download. I have it scheduled to update hourly for a couple of days already but nothing. If i click 'check now' I don't get any version to download. I didn't find anywhere to download it manually. Dynamic update finds the new version but doesn't download it with 'No ETAG from response' error message. ...

santonic by • L6 Presenter
  • 4261 Views
  • 6 replies
  • 0 Likes

Bulk upload of set commands in PAN-OS

Hello All,I'm working on a migration that requires me to breakout one large SRX config into a PAN-OS config while implimenting multiple VSYS instances. I am managing the configuration via Panorama, so I've got a base config out of the migration tool for the policies and I have that in a conversion device group. I'm using a CLI output of set co...

dan731028 by • L3 Networker
  • 6466 Views
  • 1 replies
  • 0 Likes

Resolved! CLI - invalid syntax errors when pasting in config

Good evening I often have to configure a hundred new address objects at a time and then add them to an address group. I prepare the config by using Excel to combine columns with different values until I have the string of txt that I can paste into the CLI to add these objects to the PA. Here is an example of some of the lines of code I e...

RobSmith by • L1 Bithead
  • 12474 Views
  • 4 replies
  • 0 Likes

PA-500 Url Filtering

Hello, i have another problem with policies... I used AD to filter people which can access the appropriate site. And I have rule in order: 1. Allow facebook (when I give access to whole facebook application) 2. Allow Youtube (when I use url filtering) In my opinion when user who is in group allow_facebook and allow_youtube and want to ope...

ITBT by • L1 Bithead
  • 3571 Views
  • 3 replies
  • 0 Likes

configuration of the NAT rules to DMZ zone

Hello, In our office we have two servers in a DMZ zone (10.10.10.3 and 10.10.10.4). In the PA-500 I created a DMZ zone that's related to a vlan in the switch . This switch i related to the serves (10.10.10.3 and 10.10.10.4). The servers are in DMZ zone so I configure the NAT rules with static NAT and I open the necessary ports. But without any...

NAT-cisco.JPG
RCHAIBI by • L2 Linker
  • 10528 Views
  • 13 replies
  • 0 Likes

User Activity Report - Username not available for report

Hi All, This is my first time posting, so if I am doing it wrong, please let me know. I have attempted to find relevant documentation, but nothing I have found actually seems to describe my issue. I had a request for an activity report for a user to be generated today - normally this process is quite easy and issue free; this time however, when ...

Signature Questoin - New Malware Affecting Cisco Devices - SYNful Knock

Please review the following white paper produced by Mandiant. This also has SNORT rules attached.https://www2.fireeye.com/rs/848-DID-242/images/rpt-synful-knock.pdfQuestion: Has Palo Alto produced a signature update for their IPS/Firewall devices to catch this type of attack/malware?If so, can you please provide details.Thank you,Baber

  • 24332 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks