This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4117 Views
  • 0 replies
  • 0 Likes

Resolved! Block Google Chrome Update

Hi Community, Is there a way to block Google Chrome update? There aren't any app, signature in the App-List. I've previously configured to block Firefox Update as the App signature in PA, and it was working fine. Did any of you had this need, or created custom app to disable Google Chrome Update? Kind Regards.

VWire and Oracle Database Traffic - Devs are complaining that its slow - Palo Alto 6.1.6

I was wondering if anyone in the community had any experience with implementing Oracle databases and Palo Alto in a VWire environment. Over the weekend we implemented a pair of Active/Active 5060's between the our data center and core. Every other application (AD, File Share, Print, VMWare View, Video, Voice, etc.) seems to be working as norma...

SSL Decryption, ¿hardware or software?

Hi, anybody knows if PA3020 and PA3050 has a dedicated hardware for SSL Decryption?. I saw a document a few years ago where you can see that some Palo Altos has a dedicated chip for SSL decryption but I could not find it again and I do not see if PA3020 and PA3050 has the hardware or not. Many thanks for your help Best regardsSamuel

ssancho by • L2 Linker
  • 4370 Views
  • 3 replies
  • 0 Likes

Resolved! Wildfire stopped working on PANOS 7.0.2

Hi All, Have an issue with WF wherein it has completely stopped working on PANOS 7.0.2.I have a ticket with 3rd party support and PA for this, just wondering if anyone has experience or knows the fix. Mgmt interface is service route for wf public cloud - i am registered://nickeo@chal-telehouse> show wildfire statusConnection info:Signature ve...

nikonau by • L1 Bithead
  • 6065 Views
  • 4 replies
  • 0 Likes

Palo Alto Physical Connections in HA - Best Practice

Hi Team, I am after some guidance on how to deploy a pair of PA3020's using vwire. Upstream connects to ASA in L3 mode and downstream connects to Nexus5K.Some one told me to plug in PA01 to ASA01 and PA02 to ASA02, likewise for N5K's. Is this the best way to do it? I thought it would be better to have some sort of switching devices to have the c...

BGP Peering Issue

I have a PA connected to my upstream provider exactly how it is with the same provider at two other locations, but I cannot for the life of me get BGP to establish. I've got a case open, but they're being hilarious slow and only responding with canned redundant questions and management is getting impatient. Is there a way to turn on debugging wi...

PAN-DB Re-Categorization Requests

Just curious what everyone's expereince / success has been when trying to get URLs re-categorized, especially malicious domains? I don't seem to have much luck instilling a sense of urgency with support on these requests. I submitted a support case for a domain on a domain on the 10th that we see phishing/credential harvesting and I've still got...

Resolved! what is the time range/time frame of each predefined report?

Palo Alto Firewall has the friendly predefined reports that I can make a report group and receive it by mail easily. But there is a question, what is the time range/time frame of each predefined report? That’s important to judge each event to my network. Can someone help me to check this issue?

BillChen by • L0 Member
  • 3256 Views
  • 2 replies
  • 0 Likes

Resolved! Export license expiration info from Panorama for managed devices?

I'd like to be able export the license expiration information from Panorama for all my managed devices. This would be helpful for creating bills of materials and getting current data for financial planning with real, live data. The support portal's asset management system isn't as useful because I can't remove old devices! Here is an example o...

renewal-dates.png
mgentile by • L2 Linker
  • 8595 Views
  • 6 replies
  • 0 Likes

SSL inbound inspection question

Hello,I have PAN OS 6.0.10, I need to implement SSL inbound inspection, for my web server, but I have multiple SSL certificate for same public ip address. When I try to commit configuration, the commit failed. I think PAN support only one Decryption rule for public IP. It's possible to have multiple SSL certificate for same public ip address and...

ctovazzi by • L1 Bithead
  • 3659 Views
  • 3 replies
  • 0 Likes

Resolved! Decrypt Exchange traffic

Hi, I´m trying out decrypting traffic to and from our Exchange server. When decrypting incomming traffic the application change from SSL to what ever is in there. ie ms-exchange, outlook-web, rpc-over-http etc. Now for clients to be able to connect I need to allow all theese applications instead of only SSL. Would this potentially present more o...

mgusta by • L2 Linker
  • 8272 Views
  • 3 replies
  • 0 Likes

Windows 8.1 Modern UI Apps not working when connected to GP VPN

Hi everyone Does someone also has experienced the issue that Modern UI Apps on Windows 8.1 are not working when connected over VPN? I have already read a lot of information about this issue and that there are a lot of people who have seen this, but unfortunately nothing helped until now to fix this.When I do a packet capture on the physical inte...

Remo by • L7 Applicator
  • 3733 Views
  • 2 replies
  • 0 Likes

Allow Office 365 not getting desired results...

Hei,We recently moved over to a full O365 solution and I am trying to customise the ruleset to Allow for O365 traffic when all other traffic is blocked. Unfortunately I have hit a wall and cannot seem to get the application to be allowed. I am hoping one of you can point out what I have done wrong and how to correct it. I have used Addresses (wi...

Decryption and Certificate Questions

Hello Pros,I would like to set up decryption for all traffic/devices accessing the internet. This will include smartphones and all sorts of devices. I would like to set it up in a way where each user is not forced to install a certificate before the device trusts the certificate. 1. If I create a certificate on the Palo and mark it 'Forward T...

Bocsa by • L3 Networker
  • 7758 Views
  • 7 replies
  • 0 Likes
  • 24334 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks