This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

OSPF through Vwire

I attempted to install a PA5060 between a Cisco ASA and Cisco Nexus switch in vwire mode. the ASA has an OSPF neighbor with the nexus 7k to distribute the defualt route learned via BGP from the ISP. Once the 5060 was installed, the OSPF neigbor came up but the routes were not exchanged. in the logs I see the traffic as allowed and the applicat...

Global Protect Speeds?

Hi, realtively new to PAN, and have some questions related to Global Protect speeds. I have a win 7 x64 client connected to a gateway on my 3020. From the client to the internet over 30mbs of bw From the PA3020 VPN interface to the itnernet 20mbs of bw I set up file copies of large iso files and compare the speeds. pulling from server to clie...

NeilR by • L2 Linker
  • 5507 Views
  • 3 replies
  • 0 Likes

Panorama Access Domain Admins - Not functioning 7.0.3

Currently we have been working with setting up Access Domain accounts for our server admins to have restricted RO access to traffic logs and policy rules. The configuration appears sound but all testing using either local or radius/ldap auth accounts have proven to fail. Recieving the following message each time the CORRECT password and login na...

login-error.jpg

Resolved! Upgrading Panorama and Firewalls to 7.0.3

Hey All, I have some questions regarding the upgrade of Panorama and firewalls to version 7.0.3. I am looking to upgrade both fairly soon, and want to avoid any gotchas. My environment currently has Panorama at 6.1.4 and all firewalls at 6.1.4 or 6.1.2. I am aware of the need to upgrade to major versions prior to minor versions (for example, 7.0...

Resolved! VPN IPSec / SSL

Hello, i have the problem with understanding How my VPN works. I have created one portal and gateway for all users profile and I generate for all of them unique certifcate. When i look in to Remote Users table I see that some of users uses SSL and another IPsec type of tunnel. Can someone explain me why one user uses SSL but another IPSec?...

ITBT by • L1 Bithead
  • 3726 Views
  • 1 replies
  • 0 Likes

Does Palo Alto support Reverse Route injection?

As title, does Palo Alto support something like CISCO "Reverse Route injection" which can inject a /32 route to the campus network for a dial-in user? Or can I create a /24 loopback interface for VPN users and redistribute the /24 to campus network? Thanks in advance.

Slow Network Traffic Using Global Protect

Hi, We are experiencing high latency when using Global Protect. It peaks to 1000ms. We tried to use Cisco VPN to isolate the problem and latency peaks at 90ms. We removed security profiles that may cause latency but it did not work. We also noticed that the problem occurs every morning and traffic is normal again from 1pm onwards. We checked t...

Automation of a vsys configuration

We would like to automate the configuration of a new vsys, uisng inputs from a file or script with the required information, using either the set commands or the API. Has anyone attempted to do this, and what is the best way and how to gather the require commands etc for this. Any suggestions would be helpful. Thanks you David

dwmaas by • L2 Linker
  • 3358 Views
  • 1 replies
  • 0 Likes

Resolved! Allow one URL out of many sharing an IP

We're faced with a bit of a challenge. We blocked a GoDaddy-Hosting IP for sending malicious traffic to our campus. Faculty later complained that a site they rely on is hosted with the same IP. I've attempted many different configurations with IP filtering, URL whitelisting etc, but can't quite arrive at a simple working solution (Plan B is blac...

rcaduser by • L0 Member
  • 2837 Views
  • 2 replies
  • 0 Likes

Web UI authentication LDAP fails

Hi All, I have configured everything correct. But no entry in LDAP server security logs while I try to login paloalto Web UI using LDAP profile. Here at pan I can retrieve the all group user. I have configured the auth. Profile to 'all' entry in allow list..tried both domain\username(captive portal working fine with this format) and userna...

Javith by • L3 Networker
  • 5493 Views
  • 4 replies
  • 0 Likes

Adding Tag Information to Email Alerts

Currently we have our Security Policies setup in a way that the name of the rule is the server and the tag identifies what resource is being accessed (URL). As it is when I receive an alert of malicious intent on a rule it sends me the Rule name and the usual information. I'd like to be able to include the tag information in the Email server p...

greeng by • L2 Linker
  • 2911 Views
  • 1 replies
  • 1 Likes
  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks