General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4127 Views
  • 0 replies
  • 0 Likes

Resolved! Filename capturing not working...

Hi everyone,Is it possible to capture filenames as they are uploaded to dropbox, box.com, justcloud.com, etc...? We "should" be decrypting the traffic according to our decryption policy. Well it at least shows the flag decrypted in the packet capture. But.....I'm not seeing the filename anywhere. We'd like to know who transferred what to where a...

Crash28 by L1 Bithead
  • 4245 Views
  • 3 replies
  • 0 Likes

How to configure a pa-500 with 2 inputs

I have a PA-500 running as a web proxy, The connection from the inside is a ASA-5512 (required), except that I have 2 5512's running in active-standby failover mode. How do I connect both 5512's into the PA500 so that if a failover happens the traffic from the back 5512 is scanned?

jtribble by Not applicable
  • 7758 Views
  • 10 replies
  • 0 Likes

Zone Configuration

Firstly, apologies if there is already a thread on this.I have a pair of PA5020's running in HA mode with PAN-OS 6.0.5-h3When trying to create new interfaces I get the following errors Interface X has no zone configuration.Interface Y has no zone configuration After looking at other threads it says to configure the zones using the CLI However t...

JulianH by L1 Bithead
  • 2834 Views
  • 1 replies
  • 0 Likes

Panorama 6.0.4 and PA-200 6.1.0

Seems like the PA-200 will not connect to Panorama after software Update to 6.1.0Just wanted to check if this is the case. (Panorama needs to be at least 6.1.0 to get the PA with 6.1.0 connected, or if i have an other issue)thanks,Kai

MFB123 by L1 Bithead
  • 3055 Views
  • 1 replies
  • 0 Likes

Resolved! Kipmi0 process eating up to 100% cpu

Hi all,Please I would need your help. After upgrading to Panorama 7.0.1 (current PAN-OS is 7.0.0) I´m having constantly CPU peaks up to 90-100% caused by the process Kipmi0. Did anyone else have the same problem?? What this process is used for?? Is possible to re-start this process??Many thanks in advance.Marcos.

Carracido by L4 Transporter
  • 5815 Views
  • 1 replies
  • 0 Likes

GlobalProtect Prelogon - using non-cached AD account

So i 've been having some issues getting GP prelogon working correctly. As of right now - GP will make the VPN connection before logon(i am able to ping my device prior to logon) and after i login with a cached account it maintains its VPN connection and i have full network access, no issues. However, when i log in using a non-cached account - ...

sross79 by L1 Bithead
  • 7495 Views
  • 7 replies
  • 0 Likes

VPN flapping

Hi, we have configured a VPN site-to-site between Juniper SSG and PA3020. The tunnel is flapping up/down. The VPN is well-configured and we have configured VPN monitor with Rekey option in the SSG. How could we know why the tunnel is flapping all the time??? i attached the PA logs2015-07-30 16:52:11 [PROTO_NOTIFY]: ====> PHASE-2 NEGOTIATION...

SOC_CSG by L4 Transporter
  • 5214 Views
  • 2 replies
  • 0 Likes

Meru Integration with PANOS 6.1.5

HI Folks,We're trying integrate our Meru system with Palo Alto Networks. but can't find any documentation.As far as i can see we have two options:- Radius- Syslog feed straight to the PA device.Has anyone created the regex's / parsers for Meru and Syslog integration with Palo?Many Thanks,Chris

PA device responds to unwanted ARP requests

Hi,I've stumbled upon a tricky situation that I've managed to resolve but still don't know why PA did what it did.The scenario is as follows:1) Internet traffic comes into PA from the WAN zone, internal users use the LAN zone.2) There is a DMZ switched VLAN. PA has an L3 interface in that VLAN with an IP of 192.168.0.1. This interface is in the ...

What's mean for counter "flow_fpga_rcv_err" ?

Hi guys,Sometimes, the firewall has got a increasing drop counter simultaneously as following."flow_fpga_rcv_err" - Packets dropped: receive error from offload processorpacket drop : offload processor parse errorI want to know it is expected behavior or not. If it is expected behavior, Please let me know in detail.Thanks.Regards,Roh

Resolved! Failed to handle CONFIG_COMMIT

Hi, did anyone had this error before?Operation CommitResult OKDetailsConfiguration committed successfullyWarningsError: failed to handle CONFIG_COMMIT(Module: device)It appeared out of nowhere. I run 7.0.0

Session behaviour during vrouter changes

Hi everyone,We've got a number of virtual-routers in our PA-5050s and we're looking to do some consolidation to simplify the configuration. Basically, we're looking to reduce the number of vrouters by moving interfaces that are currently in different vrouters into one common one. We are not going to change the zones associated with the interfa...

Mack by L2 Linker
  • 2613 Views
  • 1 replies
  • 0 Likes

Resolved! PanOS6 - Redundant VPN Tunnels

Hi all,I cannot find an easy solution to this problem of having an automatic failover once the primary VPN tunnel goes down. Goal is to have both Tunnels up and runnig at the same time, once the primary VPN tunnel dies it will automatically use the other remaining backup tunnel. Remote Peer IP (195.186.255.x) stays the same for both tunnels. Cur...

gafrol by L4 Transporter
  • 7794 Views
  • 5 replies
  • 0 Likes
  • 24336 Posts
  • 124 Subscriptions
Labels