General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Upgrading Panorama and Firewalls to 7.0.3

Hey All, I have some questions regarding the upgrade of Panorama and firewalls to version 7.0.3. I am looking to upgrade both fairly soon, and want to avoid any gotchas. My environment currently has Panorama at 6.1.4 and all firewalls at 6.1.4 or 6.1.2. I am aware of the need to upgrade to major versions prior to minor versions (for example, 7.0...

Resolved! VPN IPSec / SSL

Hello, i have the problem with understanding How my VPN works. I have created one portal and gateway for all users profile and I generate for all of them unique certifcate. When i look in to Remote Users table I see that some of users uses SSL and another IPsec type of tunnel. Can someone explain me why one user uses SSL but another IPSec?...

ITBT by L1 Bithead
  • 3712 Views
  • 1 replies
  • 0 Likes

Does Palo Alto support Reverse Route injection?

As title, does Palo Alto support something like CISCO "Reverse Route injection" which can inject a /32 route to the campus network for a dial-in user? Or can I create a /24 loopback interface for VPN users and redistribute the /24 to campus network? Thanks in advance.

Slow Network Traffic Using Global Protect

Hi, We are experiencing high latency when using Global Protect. It peaks to 1000ms. We tried to use Cisco VPN to isolate the problem and latency peaks at 90ms. We removed security profiles that may cause latency but it did not work. We also noticed that the problem occurs every morning and traffic is normal again from 1pm onwards. We checked t...

Automation of a vsys configuration

We would like to automate the configuration of a new vsys, uisng inputs from a file or script with the required information, using either the set commands or the API. Has anyone attempted to do this, and what is the best way and how to gather the require commands etc for this. Any suggestions would be helpful. Thanks you David

dwmaas by L2 Linker
  • 3317 Views
  • 1 replies
  • 0 Likes

Resolved! Allow one URL out of many sharing an IP

We're faced with a bit of a challenge. We blocked a GoDaddy-Hosting IP for sending malicious traffic to our campus. Faculty later complained that a site they rely on is hosted with the same IP. I've attempted many different configurations with IP filtering, URL whitelisting etc, but can't quite arrive at a simple working solution (Plan B is blac...

rcaduser by L0 Member
  • 2818 Views
  • 2 replies
  • 0 Likes

Web UI authentication LDAP fails

Hi All, I have configured everything correct. But no entry in LDAP server security logs while I try to login paloalto Web UI using LDAP profile. Here at pan I can retrieve the all group user. I have configured the auth. Profile to 'all' entry in allow list..tried both domain\username(captive portal working fine with this format) and userna...

Javith by L3 Networker
  • 5472 Views
  • 4 replies
  • 0 Likes

Adding Tag Information to Email Alerts

Currently we have our Security Policies setup in a way that the name of the rule is the server and the tag identifies what resource is being accessed (URL). As it is when I receive an alert of malicious intent on a rule it sends me the Rule name and the usual information. I'd like to be able to include the tag information in the Email server p...

greeng by L2 Linker
  • 2902 Views
  • 1 replies
  • 1 Likes

Resolved! Virtual PA

Is there a URL that can I can download a evaluation Virtual PA from so that I can try a few configuration on it rather than trying it on the live physical appliance.

RC-BHF by L2 Linker
  • 3139 Views
  • 2 replies
  • 0 Likes

Resolved! Network requirements for HA clustering

Hello, is there any document that describes network requirements for clustering two firewalls. Especially how far apart two firewall can be (latency, delay etc.)Is there any design scenario where two firewalls on two different sites can be clustered together (geo-clustering)

  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
Labels