This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

SHA256 forward decryption on Palo Alto Networks Firewall PanOS 5.0.15

I have a private subordinate CA signed using sha256. This is my forward decryption certificate. The trust anchor is also sha256.With forward decryption enabled on my PanOS5.0.15 device, the certificates generated by the firewall are signed using sha1, even when the websites real certificate is signed using sha256.The current changes made by Go...

EdwinD by • L3 Networker
  • 4907 Views
  • 1 replies
  • 0 Likes

Panorama and Active/Active Setup

I'm setting up two 7050's in an active/active configuration. What is the best method to handle this with Panorama? Right now I only have one of them in there and it seems like only one of the nodes is getting my config changes even though I have config sync turned on.

Resolved! Block pornographic Google images.

I have URL filtering configured that blocks pornography, but if I search in Google for pornography and then click on images, pornographic images are accessible. I know that I can block these in Chrome browser, but how do I block them as a policy via the firewall?

JeffC_ by • Not applicable
  • 10710 Views
  • 7 replies
  • 0 Likes

Global Protect Problems on a Mac

Running Global Protect version 2.1.0-50 on a Macbook Pro with OS X and Yosemite. Connecting to a PA-500 running PANOS 4.1.8.When I finish using my Mac for the day, I put it in Sleep mode so that it starts up again instantly. But if the VPN through Global Protect is active at the time and I forget to Disconnect, it gets locked up and there's no w...

dehrmann by • Not applicable
  • 5107 Views
  • 3 replies
  • 0 Likes

allow single url

Hi,on URL-filtering how can I allow a single URL (i.e. docs.google.com) and block all the others ? Thanks.

lauro7 by • L0 Member
  • 6692 Views
  • 7 replies
  • 0 Likes

Resolved! AppID Palo Alto SSL

Hi, im checking my logs about AppID behaviour. i realised that in traffic https (withouth SSLdecypt policy configured) the PA is detecting facebook-base in SSL connection but with youtube for example is not detecting the app and it shows SSL. Why in a SSL session the PA detects Facebook and not youtube???? without SSLdecryot policy....thanks

SOC_CSG by • L4 Transporter
  • 2919 Views
  • 1 replies
  • 0 Likes

Identifying unknown-tcp in Monitor tab

Hello,We have a PA-3020 running 6.0.3. Basically we have iSCSI replication set up between two sites. When I pull up the traffic in the Monitor tab I see the picture below. Even though iSCSI traffic is defined in the Applications section I tried creating another app to identify it but still see the "unknown-tcp" traffic show up. Is there some...

ClintL by • L2 Linker
  • 9867 Views
  • 13 replies
  • 0 Likes

Resolved! Netflix and HTTPS

I am curious what the general take of the recent Netflix announcement is with regard to our ability to control the traffic. Announcement here . I have an opinion as to whether it is necessary, but that is another subject altogether.It is clear there is only so much application ID that can occur if the data is encrypted, but can it be combined w...

BobW by • L4 Transporter
  • 9246 Views
  • 5 replies
  • 0 Likes

Resolved! User-ID Agent „established a connection to suspicious IP ...“

Hi everybody,does everyone have this situation on your PA-FW on the ports 137, 139 and 445 with country's: CN, US, MY, IN ...We have a lot of outgoing traffic with this situation and find out, that the PaloAlto "User-ID Agent" is the causer.A lot of the external (outside) addresses are in case of "WebBot" - very curiosity.

What on base are showed for "show all signatures" of exception menu in vulnerability?

Hello,I have a question.What on base are showed for "show all signatures" of exception menu in vulnerability?I knew installed threat version in FW show.But I guest it is not fact. Look at the following images.The above FW does not have threat signatures.All vulnerability signatures show me. Are hese signatures not real?Thanks,KC Lee

Captive Portal login page not prompted for IE6 browsers

Hi there everyone,Has anyone experienced any issue getting the captive portal login page to be prompted for old Windows machines running Internet Explorer 6? I have a customer whose environment is currently using IE6 and a PAN firewall running PAN OS 5.0.6 and the captive portal page isn't being prompted for these machines. Or is there a browser...

mytechpa by • L0 Member
  • 3675 Views
  • 2 replies
  • 0 Likes

Qos statitics question

Hi,The above screenshot I took from the Qos rules under Qos Statistics .The Name field (first column ) is empty . What does it mean .?Thanks

sib2017 by • L4 Transporter
  • 2656 Views
  • 3 replies
  • 0 Likes

Resolved! Application Blocking

Dear PAN Discussion Forum,I come to you in dire need of assistance. There is a battle going on within my network realm. A battle that we are losing. Some of my people have been mislead by downloading the Torch Browser application, and are now infected!The Torch Browser. Sucks in my users with an edgy-cool looking website that shows its fun to us...

Rags by • L2 Linker
  • 12140 Views
  • 6 replies
  • 1 Likes

Resolved! Blocking Facebook for a group of USERS

Hello To All,We've a PA-500 which is linked to the AD. The idea is to block Facebook for a group of users.The thing is when those users will be logged (login and password), the AD update the PA-500.To block facebook for those users, What should be done?-1- Create a group of users-2- Create a Policy which include those users and a Deny rule for f...

Android VPN Split Tunneling

Hi, I have problems with Splti tuneling and Android devices using preinstalled VPN Android client. There is a workaround to solve it ? Regards, Jorge Goya.

IAC_SIC by • L1 Bithead
  • 3969 Views
  • 2 replies
  • 0 Likes
  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks