General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4438 Views
  • 0 replies
  • 0 Likes

Global Protect Speeds?

Hi, realtively new to PAN, and have some questions related to Global Protect speeds. I have a win 7 x64 client connected to a gateway on my 3020. From the client to the internet over 30mbs of bw From the PA3020 VPN interface to the itnernet 20mbs of bw I set up file copies of large iso files and compare the speeds. pulling from server to clie...

NeilR by L2 Linker
  • 5381 Views
  • 3 replies
  • 0 Likes

Panorama Access Domain Admins - Not functioning 7.0.3

Currently we have been working with setting up Access Domain accounts for our server admins to have restricted RO access to traffic logs and policy rules. The configuration appears sound but all testing using either local or radius/ldap auth accounts have proven to fail. Recieving the following message each time the CORRECT password and login na...

login-error.jpg

Resolved! Upgrading Panorama and Firewalls to 7.0.3

Hey All, I have some questions regarding the upgrade of Panorama and firewalls to version 7.0.3. I am looking to upgrade both fairly soon, and want to avoid any gotchas. My environment currently has Panorama at 6.1.4 and all firewalls at 6.1.4 or 6.1.2. I am aware of the need to upgrade to major versions prior to minor versions (for example, 7.0...

Resolved! VPN IPSec / SSL

Hello, i have the problem with understanding How my VPN works. I have created one portal and gateway for all users profile and I generate for all of them unique certifcate. When i look in to Remote Users table I see that some of users uses SSL and another IPsec type of tunnel. Can someone explain me why one user uses SSL but another IPSec?...

ITBT by L1 Bithead
  • 3666 Views
  • 1 replies
  • 0 Likes

Does Palo Alto support Reverse Route injection?

As title, does Palo Alto support something like CISCO "Reverse Route injection" which can inject a /32 route to the campus network for a dial-in user? Or can I create a /24 loopback interface for VPN users and redistribute the /24 to campus network? Thanks in advance.

Slow Network Traffic Using Global Protect

Hi, We are experiencing high latency when using Global Protect. It peaks to 1000ms. We tried to use Cisco VPN to isolate the problem and latency peaks at 90ms. We removed security profiles that may cause latency but it did not work. We also noticed that the problem occurs every morning and traffic is normal again from 1pm onwards. We checked t...

Automation of a vsys configuration

We would like to automate the configuration of a new vsys, uisng inputs from a file or script with the required information, using either the set commands or the API. Has anyone attempted to do this, and what is the best way and how to gather the require commands etc for this. Any suggestions would be helpful. Thanks you David

dwmaas by L2 Linker
  • 3250 Views
  • 1 replies
  • 0 Likes

Resolved! Allow one URL out of many sharing an IP

We're faced with a bit of a challenge. We blocked a GoDaddy-Hosting IP for sending malicious traffic to our campus. Faculty later complained that a site they rely on is hosted with the same IP. I've attempted many different configurations with IP filtering, URL whitelisting etc, but can't quite arrive at a simple working solution (Plan B is blac...

rcaduser by L0 Member
  • 2763 Views
  • 2 replies
  • 0 Likes

Web UI authentication LDAP fails

Hi All, I have configured everything correct. But no entry in LDAP server security logs while I try to login paloalto Web UI using LDAP profile. Here at pan I can retrieve the all group user. I have configured the auth. Profile to 'all' entry in allow list..tried both domain\username(captive portal working fine with this format) and userna...

Javith by L3 Networker
  • 5308 Views
  • 4 replies
  • 0 Likes

Adding Tag Information to Email Alerts

Currently we have our Security Policies setup in a way that the name of the rule is the server and the tag identifies what resource is being accessed (URL). As it is when I receive an alert of malicious intent on a rule it sends me the Rule name and the usual information. I'd like to be able to include the tag information in the Email server p...

greeng by L2 Linker
  • 2831 Views
  • 1 replies
  • 1 Likes
  • 24374 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels