This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Can PA be possible for content inspection after ssh decryption?

Hello,Can PA be possible for content inspection after ssh decryption?I looked the below document.Details on Port Forwarding Inside SSHThis document mentioned the following comment."Content and threat inspection is not done on the SSH tunnel session"I don't know that It means whether only 'ssh-tunnel' application or both 'ssh' & "ssh-tunnel' ...

schong by • L0 Member
  • 2703 Views
  • 1 replies
  • 0 Likes

What happens if Dynamic Block List server is inaccessible?

If we are retrieving a list of IP's via Dynamic Block List to Allow and/or Deny traffic, what would happen if the web server hosting the .txt file is inaccessible during a refresh? Would the DBL object lose all of the IP addresses and render the rule using it useless?

jambulo by • L4 Transporter
  • 3919 Views
  • 3 replies
  • 0 Likes

Issues with geolocation IP addresses

Hello,We have policies (geolocation) which only allow connection from Spain and Andorra.In many cases the IP addresses identified by geolocation, is not properly updated and sometimes Palo Alto identifies an IP like another country rather than as Spain or vice versa.How does a query to get that information Palo Alto?What are the files that query...

SOC_CSG by • L4 Transporter
  • 18292 Views
  • 10 replies
  • 0 Likes

Resolved! How can I export my Applications list in a given profile.

I have a rather long list of allowed applications in a profile and want to export them for various reasons. I need to document them, and as I consolidate policies to a single on I don't want to add each one if I cam import them. Is there a CLI to just get the applications names in a given profile?

Resolved! Problems with configuring Palo Alto PA-500 Firewall

Hi Guys,I can connect via serial and console port from CLI to Firewall. But when i am trying to set ip for management interface i'm getting the following errorServer error : system -> authentication-profile 'LDAP Authentication Profile' is not a valid referenceCan anybody help me?ThanksTigran

Active/Active HA on 7050

I'm getting ready to implement an Active/Active setup on a 7050. What is the best practice for bandwidth over the HA links? I'm more curious about the HA2 and HA3 links.

Preempt Loop Detected

Hi All,I've implemented Active-Passive firewall with preempt options enabled as below :I use Path monitoring to IP B to detect failure. When I shutdown the bridge (device between A and B), the Active device switch to X and A status became non-functional (Path Down).But after A became passive, immediately he request preempt to become active altho...

About Microsoft Vulnerability

Hello all,My customers PA-3020 detected a few Microsoft Vulnerability Threat coming from Inside ( Web server ) to Outside ( Internet ) . We investigated the cause of this , but could not replicate the issue and finding the cause of it. We scanned web server for malware , corrupt jpeg files but it was clean. Detected Vulnerabilities are :Micro...

DNS attack? False positive: urussynonumsantonums.com

Hello,I am new to this realm so please note if I ask alot of questions, you all have the answers. I have a PA device that has been spitting out multiple, multiple, and multiple Threat notices for the above domain: urussynonumsantonums.com. I have seen some threads where PA updated their threat database to 80,000 new entries. Plus there was an e...

Friewall does not send ms-files to wildfire

Hello,i setup wildfire to forward any application, any files so wildfire could test files against malware.I discovered that ms-office files are not sent to wildfire.File blocking rule is set to any/any/both/forwardAntivirus rule is set to block on wildfire for http/smtp/ftpAntivirus rule is set to policy rule.Despite of this i can upload/downloa...

CRA by • L1 Bithead
  • 4897 Views
  • 6 replies
  • 0 Likes

Differences between "panHAConfigFailureTrap" and "panHAConfigNotSynchTrap"

HelloI'm working with the trap MIB and I doesn't understand the differences between these one. The descriptions in the MIB file arepanHAConfigFailureTrap: HA configuration push to peer has failedpanHAConfigNotSynchTrap: HA config not automatically synchedCould someone explain me the difference.Best RegardsGonzalo ArroyoAcuntia COS

SOC_CSG by • L4 Transporter
  • 3400 Views
  • 2 replies
  • 0 Likes
  • 24446 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks