General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4129 Views
  • 0 replies
  • 0 Likes

Not understanding "WildFire: Automatically Detect and Prevent Unknown Threats"

First of all I'm very impressed with Palo Alto's firewall, I'm definitely a "fan", however we purchased a wildfire subscription under this premise:WildFireTM simplifies an organization’s response to the most dangerous threats, automatically detecting unknown malware and quickly preventing threats before an enterprise is compromised. Unlike legac...

HIPmatch IP?

Palo currently emails me the hipmatch alert and includes the internal IP that globalprotect assigned it. How do I get the public IP that the user came from in the hipmatch alert email?I know I can manually find it via the interface (which shows both the internal and external IP for users) but since hipmatch is emailing the internal IP field, how...

ulti by L3 Networker
  • 2147 Views
  • 2 replies
  • 0 Likes

Resolved! Captive Portal logs

HelloDoes anybody know how can I get some logs to check how many times a specific user was authenticated via Captive Portal?Is it possible ?Thanks in advance!!!

Resolved! Wildfire cannot test some Word docs - unsupported file type

Greetings all!I have discovered WF is not able to test some Word docs; it gives the following error:Unsupported file type: HTML document, ASCII text, with CRLF line terminatorsHowever, I am able to open these Word docs within a VM. They contain malicious macros and they are in tact. Has anyone else run into this? I haven't dug deeply yet but am ...

SDorsey by L4 Transporter
  • 8138 Views
  • 4 replies
  • 0 Likes

Resolved! Vulnerability - disable event log

Hi,I would like to get rid of events created by specific Vulnerability signature. Is this possible somehow?Thank you for any suggestions!BR radek

radp by L1 Bithead
  • 3710 Views
  • 1 replies
  • 0 Likes

Traps and Antivirus

Hi All,Looking at the Traps solution and wanted to know if the solution allows for a replacement of Antivirus or does it supplement one? I don't really want tot have to support multiple services and agents on all the devices so i was hoping for the former?

bcsgroup by L2 Linker
  • 2872 Views
  • 2 replies
  • 0 Likes

we are not getting URL in syslogs, is there any way to URL in syslogs?

<190>Mar 31 08:52:56 XXXX-firewall-name 1,2015/03/31 08:52:55,001606005137,TRAFFIC,end,1,2015/03/31 08:52:55,source_ip,,destination_ip,trust-untrust-web-services,,,paloalto-wildfire-cloud,vsys1,trust,untrust,ethernet1/1,ethernet1/3,Log_Forward,2015/03/31 08:52:55,57030,1,42349,443,45974,443,0x400053,tcp,allow,2319,1200,1119,20,2015/03/31 0...

Category explanations

I'm working to identify a few categories and what they mean. I looked in the online help and all it did was list the categories. Is there a document that gives more information about what content filtering categories are for? Specifically i'm trying to find out the difference between unknown and not-resolved? How are they used in PA?

240GB Raid SSD Upgrade

Hey guys, we are upgrading our PA-5050s drives from a single 120GB SSD to two 240GB SSDs and I was wondering how long this will take? I assume it will be pretty quick since we are installing two identical fresh 240GB drives but I wasn't sure how long it takes to build the raid and bootup after this. I can't find much in the install docs and I am...

HA Widget Showing Anti-virus Mismatch

My HA widget on my Active/Passive cluster is showing that the Anti-Virus versions are mismatched but they aren't. Refreshing the widget doesn't help. The General Information widget on both 5020s is reporting correctly at version 1555-2030 (05/21/15) but hovering over the HA widget mismatch icon shows the passive firewall at at older revision (t...

epeeler by L2 Linker
  • 2916 Views
  • 1 replies
  • 0 Likes

Resolved! multiple virtual routers sharing one internet connection

I have a firewall running in layer-3 mode. I've got multiple separate virtual routers on the inside, there is no overlapping address space in any of these. I need all of these to share one outside internet connection. I'd like to do it without static routes (other than the main default to the outside).Right now I have the outside virtual rout...

Authentication profiles

I am trying to create different globalprotect access. so I want to give access by security groups. When I search for the Users group in AD to add security groups from that they do not show up and I don't know why.

jdprovine by L4 Transporter
  • 3437 Views
  • 4 replies
  • 0 Likes

Self destruct check mark for policies and schedules

A feature I would like to see in the future is a check mark to wipe a rule. Example: I have to setup rules that are good for a single time for particular users after which the rules is no longer necessary.It would be a nice option to be able to have the rule remove itself once the schedule has expired. ThanksBob

BobW by L4 Transporter
  • 3450 Views
  • 2 replies
  • 0 Likes
  • 24336 Posts
  • 124 Subscriptions
Labels