This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Old KB nomenclator in new live community portal

Hello, Would it be possible to restore the old KB nomenclator (DOC-XXXX) as a more visible attribute of the article in this new lithium-based Live Community portal ? I noticed that the old article name is included as a tag for some of KB entries, but not for all. Thank you for your time, andreip P. S. I bet there are [now broken] cross-referenci...

andreip by • L2 Linker
  • 7883 Views
  • 3 replies
  • 8 Likes

Resolved! Memory size (100MB free)

We are receiving traps about sizee memory. We have checked the memory and we only have 100MB memory free. Is this a normal memory consumption 100 MB free???? how could we release memory if it would be necessary???. I attached a screenshot

Captura.png
SOC_CSG by • L4 Transporter
  • 4491 Views
  • 4 replies
  • 0 Likes

GlobalProtect Pre-Logon Questions

Hello,From my research, I found the answer to be 'this cannot be done', however I am asking the community in case they may know different. Can Global Protect pre-logon to a windows machine when the Portal and Gateway are setup as follows:Portal Authentication = RADIUS (3rd party OTP)Gateway Authentication = LDAPCurrently not using certs, but thi...

Google-Search display captcha

Hello all Our users getting more and more captcha-messages on google-search with the following explanation:https://support.google.com/websearch/answer/86640?hl=en After entering the captcha, google-search works for a while an then the same message is displayed again. We have a NAT pool of several public ip addresses and configured outgoing ssl-d...

Ketchup by • L0 Member
  • 5324 Views
  • 3 replies
  • 0 Likes

Simplest way to limit bandwidth for internet browsing to preserve for VOIP traffic

Here's my situation. We recently went live with a hosted VOIP system (CallTower hosted Cisco UC). We are relocating our office in a few months so we decided not to put in a dedicated circuit for voice and instead use our 20 meg DIA connection. We have a PA-200, my guess is about 20 to 30 users max using the internet concurrently and same with p...

Resolved! Captive Portal over IPv6

Does anyone have experience setting up a Captive Portal over IPv6 ? I found the detail the PAN firewall that have support for it, With IPv4 it's easy. "IPv6 user information is captured from all of the User-ID-supported repositories and terminal services, as well from captive portal and our XML API." https://www.paloaltonetworks.com/products/fea...

Kanitin by • L1 Bithead
  • 4951 Views
  • 3 replies
  • 0 Likes

Resolved! Multi-Factor Authentication for GlobalProtect

Hello All,I know the documetnation states to use a certificate as one form of authentication or hte mult-factor. However has anyone out there setup different authentication profiles for their portal and gateway configs? I'm wondering if setting up say radius otp for one and ldap/AD for the other. Thoughts?

Facebook Browser based and Facebook APP for iOS and Android

We currently allow limited facebook access like posting and allowing to post comments, but block facebook app, chat, etc. What I have noticed is that while the browser functionality works just fine, from an iPhone or Ipad, it does not. In face, you cannot even open the facebook App. However, Messanger seems to sometimes work and sometimes not. H...

User-ID Agent - Domain Override?

Hello All,I deseprately need an option to override the domain name for user-IP-mappings collected from an User-ID Agent.I've found that the Terminal Server User-ID agent has that option (https://live.paloaltonetworks.com/t5/Management-Articles/Domain-Override-Functionality-on-Terminal-Server-Agent/ta-p/63107) which is very handy for multi-domain...

BLazarov by • L1 Bithead
  • 6294 Views
  • 2 replies
  • 0 Likes

Resolved! Using Splunk for collecting PA logs

Hi. We have a PA-5050 running PAN-OS 6.1.5. With the limited disk space we currently only get about 4-5 days worth of traffic log before it starts overwriting older events. We would like to increase this period to at least 6 months. One solution would be to setup Panorama which as a virtual appliance presumably would have unlimited disk space av...

HSTS and HPKP "pinned certs" - breaks decryption and captive portal

I'm seeing many sites recently, like Google and Reddit for example, that are implementing HPKP, which prevents man-in-the-middle decryption like the PA. Currently, Chrome browsers completely ignore the PA certificate on these sites and use the site cert. Firefox just stops with a security message with no proceed or bypass, even when the PA root ...

Maxstr by • L3 Networker
  • 12324 Views
  • 8 replies
  • 0 Likes

Resolved! Global Protect Client settings

I Have configured Global protect and can successfully connect via clients. But after the initial instlal the users have to manually put in the port address along with their username and password.Is there a way to auto populate the portal address so the users do not need to know that info?

  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks