General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4135 Views
  • 0 replies
  • 0 Likes

GlobalProtect client password change help

Hi,New user here.We are setting up a dedicated VPN server using PA-200 for our small office (30 people). We are running software version 6.0 and GlobalProtect Agent 2.0.1.Here's our setup for the VPN:1. Local user database2. When the user is created, a temporary password is set.What we want to do:1. Force the user to change the password on f...

skipchang by Not applicable
  • 10458 Views
  • 3 replies
  • 0 Likes

Resolved! Can we possible to restrict another user log-in to GP using same USER-ID at the same time?

Hello Guys.I have a question about GlobalProtect. While a user is logged inn and running to GlobalProtect Gateway, Another user possible to log in to GlobalProtect Gateway with same USER-ID at the same time. I want to restrict that log-in to GP GW using same USER-ID at the same time. Can I possible to install with above things for a GP?Thanks.Re...

VPN UDP500 doesnt hit our firewall for some customers

Hi. I have a strange issue..It all began when our "LAG/LACP" in our firewall reported error but then came alive again.After that 20-30% of our ipsec vpn customers cant connect to us over UDP 500.Sporadicaly it can change - customer1 who couldnt connect yesterday might be able to connect tomorrow and vice versa.It (UDP500) seems to disappear on t...

Bosson by L0 Member
  • 3411 Views
  • 2 replies
  • 0 Likes

Resolved! Adding application filter to existing security profile

I've been looking through the forum and have not been able to find information on how to add a filter to block an application to an existing security policy rule. If someone can point me in the right direction it would be appreciated. Thank you.

dgoins by L1 Bithead
  • 5105 Views
  • 4 replies
  • 0 Likes

Intermittent tunnel down between HUB and satellite

intermittenly we are seeing tunnel go down between HUB and satellite office and getting notification.GlobalProtect Site to Site Gateway tunnel monitor down.Tunnel monitoring failed on tunnel interface:tunnelXXX to Satellite XXXX due to: Satellite not availableany help with troubleshooting steps would be helpful.

UNKNOWN on dynamic updates tab

HelloI'm observed some strange thing on Dynamic Updates TAB.Everytime after new package is downloaded and installed, package that was used before (is marked as "previously") has UNKNOWN in few fields.It's happend to Threat/WildFire/AV updates. I'm using 6.0.2 PAN.Support is unable to replicate this in their lab.Has anyone got same?RegardsSLawek

_slv_ by L4 Transporter
  • 4993 Views
  • 7 replies
  • 0 Likes

Resolved! Source and Destination NAT in the same packet

Source and Destination NAT in the same packetHi All,I am required to configure source NAT and destination NAT for the same packet in a scenario.packets are flowing through the firewall from inside zone to outside zone.As per palo alto documentation i see for source NAT my zones for NAT rule:Source Zone : InsideDestination zone :OutsideAs per pal...

ArjunDAS by Not applicable
  • 8524 Views
  • 7 replies
  • 0 Likes

Firewall back up

Hi GuysI need to replace my firewall. So I need to export all config and state of the old device. I was looking for some back up button on firewall but did't find. How can i solve this task?Thanks

Global Protect - Long Windows login time

I am having users complain that after installing Global Protect, their machine is taking a lot logger to login. We have Global Protect set up as an "always on" solution. So if your machine has access to the internet it will automatically connect. We are using certificate authentication at the machine and the user level. When a user's is not logg...

Folders for reports

I have quite a few reports - custom reports, report groups, etc., but the only way I can organize them is to name the reports and sort the column e.g. DNS reports start with DNS, email reports start with email, etc. Is there a way or is there a feature request for adding folders to the reports interface? Or is Panorama a better system for handli...

mike_cc by Not applicable
  • 2480 Views
  • 2 replies
  • 0 Likes

Resolved! Truncate URLs for Reports

Is it possible to truncate URLs for reports? Long URLs create reports that are impossible to read. I would like an option for truncated URLs for reports - maybe 100 characters. Right now 1 really long URL makes the entire report almost worthless because it's impossible to read.Mike

mike_cc by Not applicable
  • 4727 Views
  • 4 replies
  • 0 Likes

Resolved! The User-ID active user limit for VM-Series

Hi,I've been trying to find out the user limit for the VM series, but without success so far. I'm assuming it's 64,000, as it is for the "low-end" physical models [1], but I'd like to see that confirmed somewhere. Can someone point me to the right document?Thank you,Moritz[1] https://paloaltonetworks.com/content/dam/paloaltonetworks-com/en_US/as...

Bit Torrent deny rule

Hello i want to block all bit torrent traffic between all zones on my PA devices. I have Panorama in place and wondering what is the best way to prevent bit torrent traffic?What settings should i use for application (bittorrent and/or bittorrent-sync) and for service (any or application-default)?Can i setup source, destination and zones to be an...

Dragan by Not applicable
  • 5296 Views
  • 4 replies
  • 0 Likes
  • 24340 Posts
  • 124 Subscriptions
Labels