This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

GlobalProtect issue

Hi all,We have problem connecting to a VPN using GlobalProtect. We opened a case but maybe someone has an idea what's going on..The error message on GP client isError(4960): failed to get the tag gateways(T1404) Error(5401): Failed to get gateway list for external network.Erros on Palo Alto:GlobalProtect portal user authentication succeeded. Log...

L3 gateway Interface traffic relaying

Hello All,just want to share one thought about problem which I faced with. One of L3 interface on PAN 500 was configured as default gateway (192.168.0.1/24 sec zone "trusted") for one network. On that trusted network I have two servers, one terminal 192.168.0.10/24 and VPN 192.168.0.15/24. VPN clients with IP pool 192.168.50.0/24 are making conn...

Tician by • L3 Networker
  • 2677 Views
  • 2 replies
  • 0 Likes

Resolved! HP MSM765 Syslog RADIUS auth using user agent

we have been trying for some time now to get our msm765 syslog to be read by our pa500 / user agent. we want to use RADIUS authentication on our MSM765 controller and for the agent to read the user to IP mapping. however we have the following issue.our syslog filter looks like thisour raw syslog string is02/20/15 13:17:36:568[Debug 372]: Syslog...

d_ballam by • Not applicable
  • 4192 Views
  • 2 replies
  • 0 Likes

NAT Rules Log / Highlight Unused Rules

Hi,I'm doing maintenance and have doubts about a NAT rule.I have enabled the "Highlight Unused Rules" and this rule seems to be that using currently. But we believe that this is not in use.How can I see the activity related to a policy NAT?How can I see that affects this rule?How can I check the activity NAT using CLI?Thanks and regards,

SOC_CSG by • L4 Transporter
  • 9091 Views
  • 6 replies
  • 1 Likes

Resolved! platform specifications and features summary

Hi there,Do you know where I can find and uptodate "platform specifications and features summary" document?Mine is old (March 2011) and there is no PA3000 nor PA200 inside. I search on the website but I can't find this pdf.Regards,Edouard

epavis by • L1 Bithead
  • 7272 Views
  • 7 replies
  • 1 Likes

Deploying Panorama M-100 in HA mode

I have purchased two (2) Panorama devices M-100 to be setup in HA-mode. A couple of questions: a) There are two interfaces in the front. One for Management, but what is the second one (the one to the right) used for? b) The devices are "active/passive" or actually "primary/seconday" with a management address of its own. Which address do ...

Botnet Syslog

Hi guys,I have a syslog that I make some monitoring dashboards and the customer want one view about all botnets in my network.I had configured Palo Alto to send the logs to syslog. But I can't found the log about botnet. Somewhere know how can I do this? What log that we can see the infections?Thanks for the help!!Best RegardsLucas Passos

Resolved! Reverse Path Forwarding (RPF)

It appears to me after diligently searching that Palo Alto firewalls do not support Unicast Reverse Path Forwarding (RPF/uRPF) in any form. Is this correct? If not, how does one implement reverse path forwading on a Palo Alto Firewall?

KKUNZLER by • L1 Bithead
  • 10108 Views
  • 1 replies
  • 0 Likes

GlobalProtect and Cisco IPCommunicator

Recently rolled out GP to our users. We have some that have issues using IPCommunicator while using GP. Anybody know of anything to help these users? They are able to ping TFTP servers.Users are in UK - CallManager Cluster is in US (Wisconsin)

Resolved! Management port question

Why a separate management port if I can also logon from the trusted port? Is there a setting so I can prevent anyone from logging in via the trusted port so that they must use the Management port? Does the MP offer some special settings not available on the other ports?

jsachs by • L0 Member
  • 3887 Views
  • 3 replies
  • 0 Likes

Exchange Question

I feel this may be a dumb question, but I was hoping somebody could give me clarification.We had some issues with users receiving malware or a virus through a separate email account (ex testcompany.com), them opening it, and then it would send the email to users in their contact list, which included sending emails internally through the local ex...

Netflow records with zero values for byte and packet counts

I'm running PanOS 5.0.11 on a 5060 and am looking at exporting netflow into SiLK. In the SiLK logs, I'm seeing thousands of messages that look like this:Oct 9 09:37:43 hostname rwflowpack[3470]: IGNORED|111.222.112.13|100.200.195.225|33775|6917|6|0|0|no forward/reverse octets|Digging a little further, I see that SiLK throws that error when the...

How to request Palo Alto to add the Certificates to the trusted CA?

Hi guys,Our staff try to access on website https://webmail.spintel.net.au, but session 'aged out'. If we set that website to bypass decryption, it worked. The certificate was issued by RapidSSL SHA256 CA- G3, but it is not on the trusted CA list. However, its root CA was listed.Is there a process/way to alert Palo Alto to add the Certificates to...

MelLi by • L2 Linker
  • 5219 Views
  • 6 replies
  • 0 Likes
  • 24402 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks