This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

GlobalProtect with "Vodafone Mobile Connect"

Hey there,my colleagues are not able to connect via the HSPA USB Stick "Vodafone Mobile Connect" with our GlobalProtect gateways.I do not see any error-message on the Firewall, only a successful log in but the client disconnect after ~1 second. Also I do not see a useful hint in the log files of the GP-Client.I tried it with a LTE/4G mobile Wifi...

Error synchronizing config because of Certificate

Hi,We have a cluster active/Pasive. We have created a certificate signed by external authority with this config:After creating the certificate we have done a commit and the config failed synchronizing to the passive firewall.¿The certificates pass through HA to the passive firewall or i would have to export this create certificate to the passive...

SOC_CSG by • L4 Transporter
  • 2690 Views
  • 2 replies
  • 0 Likes

Shared Gateway with multiple virtual routers

Hello,I currently have my palo alto setup to use two VSYS ( VSYS1 AND VSYS2) each with its own virtual router.I would like them to use the same interface for outgoing internet traffic which I though I could accomplish with "shared gateways"My problem is:The interface I select to use for the shared gateway configuration does not appear when tryin...

riverj30 by • L0 Member
  • 4664 Views
  • 3 replies
  • 0 Likes

Resolved! How to Clear Disk Space/reduce disk usage

Hi Friends,panos hshah hsharma HULK Steven Puluka panagent Please suggest for the same. i am already check below document and i think, i dont have permission to root access for PAN.https://live.paloaltonetworks.com/docs/DOC-3772https://live.paloaltonetworks.com/message/31894#31894RegardsSatish

Satish by • L4 Transporter
  • 13616 Views
  • 5 replies
  • 0 Likes

TCP Windows scale option

Hi, could someone explain if PanOS is able to consider the filed "TCP Window Scale Option (WSopt)" ( http://www.ietf.org/rfc/rfc1323.txt?number=1323). when tcp asymmetric-path is disabled (drop)?I mean that in my experience the firewall drop the packet as "oow - out of window" even if it not should be dropped if we consider "calculated windows ...

helpdesk by • L1 Bithead
  • 11856 Views
  • 3 replies
  • 0 Likes

How to disable ssl v3 on vpn web page?

scanned the PA webserver we use for our VPN portal with qualys ssl scanner. Got a grade of F. Suggested to disable .... Diffie-Hellman (DH) key exchange512-bit export suitesSsl v2 and v3 how can I go about doing this?

choff123 by • L3 Networker
  • 4343 Views
  • 3 replies
  • 0 Likes

Resolved! PAN-DB categorizing wrong

Hi,We are expecting problems with PAN-DB. Our firewall in URL-Filtering is categorizing www.lavanguardia.com like category malware instead of NEWS.Why is this happening??? how can i recategorize a web in PanDB????any troubleshooting with pandb in the firewall????Atnoher question, we in my license i can see download for panDB???? should i donwloa...

SOC_CSG by • L4 Transporter
  • 6775 Views
  • 6 replies
  • 0 Likes

Standard Ports on Applications

I was wondering if anyone knew away to add a secondary defaultport on an application. For example people in my company access web-browsing onport 80 normally but there are a number of site that people have to use thatare based on port 8080. Is there a way to add more default ports so I do nothave to create more firewall rules than necessary? Th...

murphyj by • L2 Linker
  • 2962 Views
  • 3 replies
  • 0 Likes

superreader Cannot Set CLI Parameters in Panorama

I recently upgraded Panorama to 6.1.1 from 5.0.11. When I did so, RANCID was no longer able to log into Panorama and do its configuration tracking.I tracked down the problem to a superreader not being able to issue the "set cli pager off" command. This worked in 5.0.11. It still works on a firewall running 6.1.1, just not on Panorama. In 6.1.1 o...

cosx by • L2 Linker
  • 3501 Views
  • 2 replies
  • 0 Likes

Anyone use 6.1.2? Is it stable

I'm pretty interesting in upgrading to this version (on 6.0.8 at the moment). Specifically for the Wildfire email link analysis.Anyone upgraded? Is it working fine or have you run into any bugs?

pmc by • L2 Linker
  • 9475 Views
  • 10 replies
  • 0 Likes

URL filtering issue, choosing to continue onto a blocked site allows all sites that falls into the same category.

We have a continue action set to all our categories for URL filtering but I just noticed when trying out new templates (I modified and translated the "web page blocked" text to swedish), that if I go to a site like "porn.com" I get the option to continue as it should and it works fine but if I, after having clicked continue, go to other sites th...

bollnas by • L0 Member
  • 4666 Views
  • 4 replies
  • 0 Likes

Virutal Wire Mode (transparent mode?)

I just received a PA-500. This is my first PAN device, so some of the terminology is different from prior units. From what I understand, virtual wire mode is the same as transparent mode. Is this correct? In short, I want to place this device before our current FW (between our ISP and a Cisco ASA device) initially just to monitor/capture dat...

jharlow by • L3 Networker
  • 12498 Views
  • 8 replies
  • 0 Likes

URL resolving to unknown while know on brightcloud

Hi guys,We're facing a weird problem.We currently have the unknown URL category set to alert in order to log all users traffic. We tried to modify that because of some weird traffic categorised as unknown and always visiting russian website.However, this lead us to be impacted by huge amount of calls and our support personnel could not follow. W...

sebbarmo by • Not applicable
  • 11930 Views
  • 14 replies
  • 0 Likes
  • 24401 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks