General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

PAN-DB URL Category List

Hi Everyone! I'm being asked to provide a report of all of the applications, categories and URLs we are currently blocking. Does anyone know how to obtain this?

Global Protect - User login from only one device at a time

Hello, I have configured global protect and was able to connect successfully. But is there a way to restirct user login from only one device at a time?. Meaning if the user has a laptop and a smart phone , the user should connect either from the laptop or from the smart phone at time. Please help me to resolve this issue ASAP. Thanks and Regards...

Resolved! UserID Built-in Syslog listener - Limitations?

We use the Syslog integration in the PAN Agents to forward User/IP-mappings from our wireless controllers to PA 5020 firewalls. We are considering to move the Syslog integration to connect directly with the PA5020 instead of the PAN Agents. But i remember having read something about limitations on the built-in Syslog reciever. That we should st...

Resolved! Outlook timeout issues

DescriptionWe are experiencing a timeout problem when using outlook/exchange across the PA firewall.When the RPC connection between Outlook and Exchange is idle, the PA apparently terminates the connection. This causes the Outlook client to hang/stall until restarted - and thereby establishing a new RPC connection. When the timeout occours, a Ba...

palo alto networks configuration

hello, I configured a PA-500 with routing mode in our company . I set the zone , the security rules , the nat rules . I allow all traffic from trust zone to untrust zone. But the problem there is no internet connection. We use a DNS server , that is in trust zone.I add a security role from untrust zone to a trust zone (with addressof DNS server)...

SSL decryption inconsistency

Hi, I have enabled decryption on a small group for testing purposes. I have a simpel 2 rule setup, first exluding financial, health and custom white listed and then decrypt everything else. I have a hard time finding out why the same site in the same browser on different pc's behave differently. For example my colleague got ERR_SSL_PROTOCOL_ERRO...

Resolved! Processes on the Palo.

Hi,There are various processes that maybe restarted using the debug command. Most are self explanatory. But whats the difference between l3-service and routed ? and webserver and management-server ? and vardata-receiver.> device-server Device server process> l3-service L3 services server process> log-receiver Log R...

How can I add multiple IP Ranges to one Address Object

I need to create one Address Group, ExchangeCloudIPs-Grp, with many IP ranges. I have PA-500, How do I accomplish this v 7.01. What is the easisest way to accomplish this so I can go back later and add remove IP ranges?

Resolved! how to clean disk space-GUI getting session timeout

not able to access firewall using GUI getting session timeout > show system disk-spaceFilesystem Size Used Avail Use% Mounted on/dev/sda2 1.9G 1.8G 0 100% //dev/sda5 6.6G 3.9G 2.4G 63% /opt/pancfg/dev/sda6 1.9G 1.1G 709M 62% /opt/panrepotmpfs 1.3G 69M 1.2G 6% /dev/shm/dev/sda8 2.4G 1.5G 784M 66% /opt/panlogs

Resolved! Issues with Asymetric Routing

Hello Community, I need your help to how to identify the asymetric routing in my PA-3020? and what are the best way to allow or bypass these traffic until solve the routing issue the third party device?. Best RegardsAndres Padilla

Troubleshooting downloading large files

Hi , Downloading like large files continously failing , when bypass it seesm to be ok ?How could i start an investigation ?Thanks

Resolved! NAT rule being applied wrong

Hi, we have a static NAT from this ip 192.168.200.8 (zone DMZ) to 195.57. (zone VPN). But we realised that the NAT rule which is matching is wrong.Its matching the NAT rule (ftp.arag.es) but this rule has a filter by "Destination zone" Externa. And the real traffic is VPN<->DMZ Why PA is applying this rule if not being include the destian...

Resolved! User-id and re-identifying auto logon users

We have a fairly large group of thin clients that auto logon to a user account that is used for launching their Citrix desktop. We are also using the PAN firewall to use NTLM (browser-challenge) for captive portal for internet access for all users. What this means is that we have over a 1000 machines that all have an ip to user mapping to the sa...

Solar Winds

Is anyone using solar winds to monitor their PA firewall?

Migrating Sonicwall

Has anyone migrated from a sonic wall to a palo alto? If so how did you do it? The palo migration tool seems to support a load of firewalls but not sonicwalls. Is it a case of doing it all manually or is there a migration tool around that I'm missing? Any help would be massively appriciated.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

PAN-DB URL Category List

Global Protect - User login from only one device at a time