This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Upgrade cluste A/P and panorama

Hi, we have to upgrade a cluster active/passive and a panorama of this cluster. which are the steps to do these upgrades???1)upgrade the cluster like usual and then upgrade Panorama???2) first update the Panorama and then the cluster????advices...thanksRegards,

SOC_CSG by • L4 Transporter
  • 3188 Views
  • 1 replies
  • 0 Likes

Resolved! PaloAlto firewall is sending system alert

Dear All,PaloAlto firewall is sending system alert saying "PAN-DB url filtering has expired" . But the i am using only "Bright cloud" url filtering license.Please suggest.RegardsSatish

Satish by • L4 Transporter
  • 3850 Views
  • 2 replies
  • 0 Likes

Upgrade 5.0 to 6.1

Firewall device has two disk partitions:Partition 1 => 5.0.XPartition 2 => 5.0.Y (current active version)When you install now 6.0.X, it will overwrite 5.0.XSo after reboot Partition 1 will be active. Then you install the next update to 6.1.X, this will overwrite Partition 2.Partition 1 => 6.0.XPartition 2 => 6.1.X (active version aft...

Anon1 by • L4 Transporter
  • 2000 Views
  • 1 replies
  • 0 Likes

Configuring Prelogon for GlobalProtect

I'm having a heck of a time getting prelogon working for global protect. I have spoke with both Palo Alto support, as well as a vendor that is a Palo Alto partner. Neither were really able to answer my questions.Here is what I have today. Two Palo Alto 3020's. One is on the west coast, and one on the east coast. I have the portal license on...

TheHuth by • Not applicable
  • 8800 Views
  • 11 replies
  • 0 Likes

Change HA from A/A to A/P - techniques and known issues?

I have two PA-500's in Active/Active.We do not need to have them in A/A (in hindsight, it was a mistake) because we do not use asynchronous routing or meet the other typical A/A criteria. I think we are paying for that mistake, as you'll read below.When running software 6.0.5 I implemented a site-to-site VPN through which I ran a client-server a...

Resolved! User-ID for DNS

We have a server that has no body logged into it and all the DNS traffic from that server is showing as a certain user sending the traffic. Is there anyway to exclude this server from User-ID or another way to remove the user from this traffic?

Resolved! GlobalProtect User Information

Hi,Is there a way to see Global Protect tunnel statistics in either Panorama or the firewall itself? I'm looking for bytes in, bytes out, packet in, packet out statistics. The statistics are viewable from the client side if you open up the Global Protect agent, but I would like to see them from the Panorama/firewall side if possible.Thank you,...

stevena by • L0 Member
  • 3423 Views
  • 1 replies
  • 0 Likes

Resolved! Cleaning up rules

So, I, like a number of people, converted from Cisco to PAN. We had a consultant in to help with the conversion, and he was assisting with the rule cleanup. However, a) a lot of rules came straight across as it was time-critical, so they are service based, and b) I have trouble wrapping my head around app-based policies. Is there a tool that ...

rivkin by • L1 Bithead
  • 5021 Views
  • 4 replies
  • 0 Likes

Resolved! Restart daemons/services

Is there a way to manually restart daemons and services in the CLI?I have a box with sslvpn configured. The sslvpn suddenly stopped working and the portal page doesn't load. I double checked the config and the traffic logs show the traffic as being allowed and no threat/url logs being matched. I would like to try restarting just the services bef...

SDorsey by • L4 Transporter
  • 20723 Views
  • 8 replies
  • 0 Likes

Error: Certificate failed to load: invalid certificate chain

Hi there,I generated a CSR with PAN-OS 6.1.3 and submitted it to our Microsoft AD CA with subordinate CA template. After uploading the certificate it shows up under the root CA certificate of our domain. But when commiting the changes I get an "Error: Certificate failed to load: invalid certificate chain" error message. What have I done wrong?Th...

cale by • L1 Bithead
  • 13251 Views
  • 4 replies
  • 0 Likes

How to forward traffic (URL) to a syslog server?

The $misc variable can only be used for Threats?How to register the URL in syslog server?CEF Key Name: requestFull Name: requestURLData Type: stringLength: 1024Meaning: URL or filename for threat logs Palo Alto Networks Value Field: $miscfrom PANOS_6_0_CEF_ConfigurationHow to Forward Custom URL Logs to a Syslog Server

UNIVALI by • L0 Member
  • 2833 Views
  • 1 replies
  • 0 Likes

preemption loop detected

Hi,I have two PAN 500 in HA A/P configuration with PAN OS 6.1.3 and virtual wire configured with link detection failure ANY. I tested link failure detection in way to disconnect one side of Vwire and passive device takes over and became active. After some time approx. less then one minute, non-functional device tries to revert connection, became...

Tician by • L3 Networker
  • 5251 Views
  • 1 replies
  • 0 Likes

HA A/A or A/P

Hello All,I have such situation where considering in which mode to put HA PA configuration. As you can see on drawing, customer consider to put PAN in sandwich of VRRP cluster and vLAG virtual switch. VRRP has one virtual IP and MAC, and all destined packets from host went trough both active links. So far I don't know hashing algorithm of switch...

Tician by • L3 Networker
  • 4278 Views
  • 3 replies
  • 0 Likes

Global Protect LDAP Child Domains

Has anyone setup Global Protect with LDAP for Child Domain or have a link to a doc on it?Global Protect works perfect for users in the parent domain. Want authenticate users in the child domain.

ddavis1 by • Not applicable
  • 3485 Views
  • 2 replies
  • 0 Likes
  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks