General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Cloud NGFW vs VM series FW

Hi I need to replace the current Azure firewall with Palo Alto firewall in Azure cloud. Which type of firewall I need to consider between cloud NGFW and VM Series FW? What are the differences between these two? Thanks

Increase disk space on Panorama VM in Azure

Hi All, We have a Panorama VM in Azure running pan-os 10.1.10-h2 the Root partition sitting at close to 100% and tried all the recommendations to clear space but not much luck thusfar. partition is 7.5GB size. PAN-212530 addressed this issue on 10.1.10 but still happening. apart from the pan-os running, what else is kept on the root partiti...

PA_nts by L4 Transporter
  • 3840 Views
  • 3 replies
  • 0 Likes

OOM crash and HA swapping with 10.2.10

Has anyone experienced out-of-memory freeze and repeated swapping between primary and secondary HA pairs? We just had our PA-3420 freeze and stop passing traffic, followed by multiple HA swaps, followed by the same again 30min later. There was a hotfix 10.2.10-h3 released last night which includes a note about a OOM bug and a all_tasks lockup ...

STUN Application

Howdy Folks, Trying to learn more about the STUN application. Wondering if any other enterprises are allowing this application. I know the applipedia says its not high risk but it also seems like it uses a variety of ports. Don't know much about it but in this case I can make a rule based on destination and Application/protocol. Thanks, ...

Automation / API - Register and de-register devices to log-collector group

I am looking for a way to automatically register and de-register a newly created firewall to a specific log-collector group. I had hoped to achieve this with https://github.com/PaloAltoNetworks/pan-os-python but I struggle translating the xml path to work with the op() method. While running "set log-collector-group collector-group logfwd-setting...

Findus by L0 Member
  • 1457 Views
  • 2 replies
  • 0 Likes

Resolved! Local Logging configuration

Hi Team, By default i see the logging configuration it is pointing to Panorama. But we are not managing the firewall using Panorama, we are managing it locally. Can we configure the logging to be logged locally only like live logs max of 100mb should be stored for troubleshooting purpose and then auto delete. Regards, Sanjay S

can't export BPA file

Hi every one, I need export BPA file, so I follow guide link https://docs.paloaltonetworks.com/strata-cloud-manager/getting-started/dashboards/on-demand-bpa-report But when I access this page, the option to upload the tech-support file does not appear.

KhoiVu by L0 Member
  • 1734 Views
  • 3 replies
  • 0 Likes

LDAP auth not working for Palo login

Hi all, I have deployed a new Palo and configured LDAP auth but I am getting an error. I checked the BIND account is active and all settings appear ok, anything else to troubleshoot this? Reason: Internal error, e.g. network connection, DNS failure or remote server down.

MAllen_0-1722337236638.png
M.Allen by L2 Linker
  • 4190 Views
  • 9 replies
  • 0 Likes

Resolved! Nat

Hello, I Saw this on a website "Security policies differ from NAT rules in that security policies examine post-NAT zones to determine whether the packet is authorized or not." I don't understand why because it's the packet without NAT ( no NAT) that reaches the firewall and the firewall compare it to the security policy to determine whethe...

Sarou22 by L2 Linker
  • 2776 Views
  • 3 replies
  • 0 Likes

CLI find objects by wildcard search

PANOS 10.2.9-h1. Is there a way to use the CLI to wildcard search for address objects either by name or IP address? The goal is to take those objects, manipulate them in a known way, and then re-inject them. Name would be preferable. Assuming I typed them correctly, then I should be able to get about 99% accuracy in replacement of ob...

mheyman by L1 Bithead
  • 1307 Views
  • 1 replies
  • 0 Likes

Resolved! Palo VM firewall drop packets behind Azure load balancer

The topoplogy is spoke subnet ---> Aure LB ---> 2x Palo VM firewalls -> express route --> on-prem Palo firewall --> on-prem server user at spok subnet send files to onprem is very slow. we did iperf test from a subnet in the spoke vnet to an onprem test server. There are drops on both of the firewalls that behind the LB. The dropp...

  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
Labels