This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

site-to-site vpn from Sophos

IKE coming from a Sophos device is incorrectly identified as application ciscovpn instead of application ike.Is this because Sophos uses cisco-ish protocol ? All I see in the logs is udp 500...I'm happy allowing application ike, our other site-to-site vpn's work fine with it.I'm not happy however with allowing ciscovpn, since that would open a b...

dieter_b by • L4 Transporter
  • 3257 Views
  • 3 replies
  • 0 Likes

Ignore usernames that start with sophos?

On our servers we have the User-ID being mapped as companyname.com\sophosCOMPUTERNAMESophos is our AV software which uses that account for getting updates. Is there anyway for me to add any names beginning as sophos to my ignore_user_list.txt?

pmc by • L2 Linker
  • 2181 Views
  • 1 replies
  • 0 Likes

DShield top 20

Is anyone currently using this dshield top 20 list subscription? How well does it work/ Is anyone blocking inbound, outbound or both? What is the best way to configure it?

jdprovine by • L4 Transporter
  • 4936 Views
  • 6 replies
  • 0 Likes

YouTube Safety Mode

Hello,Right now we are using Safe search enforcement for staff and students. We allow YouTube for both groups but require Safety Mode to be enabled. However, we have been running into a lot of issues with YouTube flagging videos as inappropriate even when they aren't, meaning a lot of videos won't work in Safety Mode. What I would like to do ...

Unblock IP address after threat triggered block-ip

Suppose a long time value was set for a threat where one had set the action to block-ip - say 10 minutesIs there any way via the CLI or GUI to see the list of IP addresses that are blocked due to the threat engine?Better still, is there a way to clear that list, or selectively clear IP addresses?

How many security rule supported for PA7050?

Hi guys.Nowadays I have got a project for installing PA7050 but I confused about the PA7050 how many security rule supported for PA7050. Several months ago, I checked the DataSheet and Compare tools of PA7050 that mentioned PA7050 supported 80,000 rules officially. For now the below link also mentioned that PA7050 can support 80,000 rules. What...

Resolved! Panorama Application and Antivirus discrepancy!

Currently our Panorama General Information window on the dashboard is showing the following:Device Name: SA-PANMGMT1Application version: 489-2600 (03/03/15)Antivirus Version: 1503-1978 (03/10/15)I change context to one of our two firewalls (both the same) and it shows:Device Name: SA-PAN-FW1 or FW2Application version: 494-2664 (04/07/15)Antiviru...

Crash28 by • L1 Bithead
  • 2653 Views
  • 1 replies
  • 0 Likes

Site to site VPN with isa server firewall

Dear Friends,I am facing some challenge, vpn configuration with ISA server firewall. Ph-1 is up but PH-2 is not. when i put the proxy id both side firewall external ip , both Ph is up. when i put the LAN segment like (local 172.30.30.0/24 remote 192.168.167.0/24 ) ph-2 goes down. other issue when i put the local identification local ip and remot...

Satish by • L4 Transporter
  • 2351 Views
  • 1 replies
  • 0 Likes

The Check Point Advantage

3 years ago, we replaced Check Point firewalls with Palo Alto Networks.Seems this was a huge mistake. We might have to go back …..The Check Point Advantage"Palo Alto Networks, a newcomer to security, falls short in their architecture and solutions" And it's not even April Fools' day....

Dulle by • L2 Linker
  • 9621 Views
  • 5 replies
  • 1 Likes

Interface Names (for purposes of SNMP)

Is there any way to change the name or description of an interface in the device configuration? We use What's Up Gold to monitor most devices on our network- it walks SNMP and retrieves the default names just fine (mgmt, ha1, ethernet1/1, ethernet1/2, etc...).I would like to name these to something more meaningful to me in my environment- I've u...

ShaunD by • L1 Bithead
  • 4990 Views
  • 2 replies
  • 0 Likes

Resolved! LACP and HA pair

My tested design has been to LACP between the same LAG (i.e. AE0) on the PA primary and secondary units, to different LAG entries (ie. AE0, AE1) on the outside and inside equipment (Both Juniper). I have one device though (Juniper SRX) that has VPN tunnel terminations on it that have to be declared as the end-points, so I can't use different LA...

template occurances / template used

Would it be possible using panorama to find out where we have mapped specific template , for example we have template for IKE cryo , can we track using panorama on how many firewalls we have mapped that.

  • 24404 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks