General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4246 Views
  • 0 replies
  • 0 Likes

Safe Search Enforcement - Office Clip Art

I don't know if anybody else has seen this, but we have safe search enforcement turned on (and I don't plan on turning it off) and Microsoft has moved all the clip art to Bing. When you try to add clip art from within MS Word and search for "cat" the search gets blocked at the PA and none of the thumbnails are returned. It makes sense because Wo...

bbilut by L3 Networker
  • 1994 Views
  • 1 replies
  • 0 Likes

How to host on a dynamic ip?

hello,i have attempted to create a rule that will allow me to host a SSLVPN device on my DMZ but the only way I was able to connect is to place the external IP (static) in the rule. The problem is that i rely on a dynamic ip system and it will change.. is my thinking this is all wrong and is there a better way to accomplish this?

9-1-2015 2-50-37 PM.jpg
dummel by L0 Member
  • 2458 Views
  • 2 replies
  • 0 Likes

Resolved! Pull AppID descriptions via API

Hello,is it possible to pull the AppID descriptions from Panarama, firewall device or https://applipedia.paloaltonetworks.com/ in a way to use it in a "firewall change request" system?

Anon1 by L4 Transporter
  • 5515 Views
  • 2 replies
  • 0 Likes

Tagged subinterfaces configuration on L3 mode

hello; we work on our organisation to do the migration of the configuration from another firewall to the palo lato networks PA-500 . With the recent architecture the segmentation of the networks is in the switch . But now , we like to do this segmentation in the PA-500 by creation of subinterfaces . we like to do like show the screenshot : a rou...

subinterfaces-config.JPG
RCHAIBI by L2 Linker
  • 4252 Views
  • 5 replies
  • 0 Likes

Resolved! PA doc regarding migration tool instructions for Check Point is missing its attachment

The Migration Tool manual v3.1 says:“To understand what options we have to active when we migrate from Checkpoint please read this document first: https://live.paloaltonetworks.com/docs/DOC-9418” But when I go to that doc, it actually has no attachment, so I can’t find the info I want. (I’m hoping it will tell me what specific files to use for a...

ksalustro by L3 Networker
  • 4147 Views
  • 2 replies
  • 0 Likes

GlobalProtect drive mapping or login script

When our users connect locally on the network, as soon as AD authentication is passed, they receive a login script based on their OU to map certain drives. When users go home, power up their laptops, and log in, they don't receive the script and as such, don't get the drive mappings. Does GlobalProtect have a feature or option that will run th...

jmurphy by L2 Linker
  • 8385 Views
  • 6 replies
  • 0 Likes

Stateful NAT64 Table Size

Hi there, Here comes the time to design my first NAT64 solution !I have read few documents from Palo Alto, but can't get one simple information... Could anyone tell me the NAT64 table size for PA5060 ? Best Regards, Emmanuel

Duplem by L2 Linker
  • 5526 Views
  • 4 replies
  • 0 Likes

Resolved! Unable to boot PA-200

Hello,wondering if anyone is able to assit how to fix this issue. I am unable to boot PA-200 into normal operation.Nothng is happenig after reload; it sits on console and not turning on a login prompt. Appreciate your asisstance. Skipping PCIe port 0 BIST, reset not done. (port not configured)Skipping PCIe port 1 BIST, reset not done. (port ...

Resolved! Imported Check Point config shows objects and nats, but no rules - Migration tool v3.1.1

I'm importing a Check Point config into the Migration tool, v3.1.1 I see the imported objects and nat's ok, but the rules page is empty and says "no data to display" in the bottom right. I chose the files objects_5_0.C, rulebasename.pf, rulebases_5_0.fws, and the routes.txt (output of netstat -nr).I've tried it with Option A both checked and unc...

ksalustro by L3 Networker
  • 5832 Views
  • 2 replies
  • 1 Likes

Using expect script to automate building firewall templates in Panorama

Hi Community, I have been struggling with this for weeks, and have tried various means, including setting the Panorama CLI parameters. However, I always get random results, which ends up either the cmdline was entered prematurely or truncated. A support ticket was logged but proved to less than helpful, as the answer given was to lessen the numb...

benson by L0 Member
  • 4961 Views
  • 2 replies
  • 0 Likes

What is the "Any" URL Filter Category

I am seeing a handlful of Blocked URLs, with a Category of "Any". Just wondering what that is and why I might be getting them. Is it the same as "Unknown"? I do not have a URL Filter Category named Any. Thanks

BillTito by L0 Member
  • 4032 Views
  • 3 replies
  • 0 Likes

Integrated User-ID Agent vs. Windows Service?

We're running 5.1 right now and plan on upgrading to 6.1 over the next couple of days.Historically we've used the Windows User Agent on two of our domain controllers, but today I switched to the on-board Integrated User-ID Agent and set it up, and other than a noticeable increase in CPU load on the domain controllers, everything is working great...

Is SSL decryption will increase the number of sessions?

Hi Team, My doubt is that,..doing SSL decryption will increase the number of sessions?example : if i access gmail there will be one tunnel established to the server (gmail) inside which text chat, video chat, other apps will be there.Now if i enable SSL decryption will it increase the number of sessions as now it can see each and every activity ...

Gururaj by L4 Transporter
  • 3397 Views
  • 3 replies
  • 0 Likes

Resolved! URL filtering

Who is using URL filtering? Is it worth the added cost? Is there any way to do it without the license?

jdprovine by L4 Transporter
  • 5363 Views
  • 8 replies
  • 0 Likes

Global Protect not connecting

Hi Community,For the past 2 days PA's globalProtect is really becoming a headache for me. PA is becoming pain for me on these days.It won't connect, stated as not connected, sometimes it stuck at "Connecting", and if that's the lucky hour, it will connect once or twice. I've tested it on so many computers, restarting the pc, uninstalling GP, and...

  • 24359 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels