General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

PHP vulnerability CVE-2014-3710

Hi,

In relation to this vulnerability: CVE-2014-3710. Does anyone know if PA have some signature (Threat) that can stop this?

http://php.net/ChangeLog-5.php

any help will be appreciated

Regards,

dicu

SOC_CSG by L4 Transporter
  • 2320 Views
  • 2 replies
  • 0 Likes

Global Protect HTTPS weakness - Help!

Hi,

I would really like an answer to this considering this is supposed to be a security product in the first place and I see several people have already asked the question.

We have just had a security audit completed by a third party, they highlighted

...

tezza by L2 Linker
  • 5707 Views
  • 8 replies
  • 0 Likes

LSVPN configuration Question

In order to register with the LSVPN, each satellite must establish an SSL/TLS connection with the portal. After

establishing the connection, the portal authenticates the satellite device to ensure that is authorized to join the

LSVPN..

Just want to unde

...

Resolved! Global Protect before login

This may have been posted before but I am not finding the answer with my searches.  I have a single Global Protect Gateway setup with a split tunnel configuration.  I found a tech note for how to setup both a split and full tunnel on the same gateway

...

GlobalProtect Welcome Page for network links

I have been  testing out using the Welcome page for the Global Protect client as a landing page for network links.  The old appliance had a user friendly set of links for the average user.  Right now the basic web links for email or www pages work fi

...

Resolved! SNMP notifications - some missing?

I have enabled SNMP notifications on threats greater than or equal to severity "medium". Under monitor > threats I am seeing my alerts, but I only receive (via SNMP) some of the threats that shows up on the PA interface. Here is an example:

I am only

...

mcocat by Not applicable
  • 3078 Views
  • 5 replies
  • 0 Likes

Log Question - Key Exchange

We randomly seem to get some alerts that say:

SYSTEM ALERT : high :  error: Key exchange failed in SSH handshake - DH key

I'm new to Palo Alto firewalls and was just curious if this is something that can be ignored? Was thinking that this might be the

...

Resolved! Management profile issue

Hi Friends,

please suggest, i have create a management profile (ping,ssh,https ) and apply e1/1 (static ip) but i am not able to ping and web access.

Regards Satish

Satish by L4 Transporter
  • 5424 Views
  • 12 replies
  • 0 Likes

Global protect with AD integrated issue

Hi Friends,

How are you. i hope you are doing well. i need one suggestion from you guys... One of the our customer  using Global Protect Remote VPN with PACluster Gateway. they have integrated AD with PA deviceand GP users connecting through AD creden

...

Satish by L4 Transporter
  • 2171 Views
  • 3 replies
  • 0 Likes

Are there PA-7050 operation ressources?

Hi,

I would like to know, whether there are already special resources for chassis operation? There seem to be separate logs for the cards. These special things seem not to be covered yet neither by the CLI Reference Guide nor by the Hardware Reference

...

Unibw by L2 Linker
  • 1696 Views
  • 1 replies
  • 0 Likes

Incorrect catagory

Hi.....I have a url which is being blocked under malware-sites.

I used the URL test site and it's in the travel category.

http://www.therollingpin.com.au

In monitor, ocsp action is deny on the blocking outbound rule, I've removed ocsp application from t

...

asabadin by L1 Bithead
  • 1740 Views
  • 2 replies
  • 0 Likes

Best CPU allocation for VM-100

Hi,

Say I have a KVM VM-100 (using SR-IOV) that I want to push 100Mbps of internet traffic through it, say you have 8 physical cores and for this VM-100 you choose to allocate 2400Mhz to it's VM, is it best to reserve:

2 cores at 1200Mhz

3 cores at 800

...

  • 23655 Posts
  • 104 Subscriptions
Top Solution Authors
Top Liked Authors
Labels