This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! No information showing up in Monitor->Logs->Traffic

Dealing with my first experience with Palo Alto Firewalls. I am working with the vmware appliance version. I have two rules/policies current configured. One allows all traffic outbound and the other allows only ms-rdp traffic inbound. This is a lab situation until I feel comfortable with deploying in a production situation. I have one host b...

RNutter by • Not applicable
  • 3812 Views
  • 2 replies
  • 1 Likes

Resolved! Subinterface

Hello I have a PA500 firmware version 6.0.7. All interfaces are used, can I create a subinterface? I need to make a new segment. What is recommended to do that I need?Thank you

Antivirus Security Profile Exception

I want to create an exception action for a specific antivirus ID (which happens to be outbound traffic). The default action is “alert” and I want this one ID to be “drop”. This is possible for the spyware and vulnerability profiles, but my problem is that it looks like the antivirus security profile exceptions are ONLY “allow”. How can I configu...

JohnPa by • L1 Bithead
  • 2545 Views
  • 2 replies
  • 0 Likes

Resolved! Server Certificate Verification Failed

Within the past couple of days I am starting to get reports from users that while trying to sign in with GlobalProtect they are receiving the following error:Gateway X.X.X.X: Server certificate verification failedNo changes have been made on the PA. Any suggestions for places to start looking?

mcocat by • Not applicable
  • 9732 Views
  • 1 replies
  • 0 Likes

Resolved! Wildfire Double Ring - Perimetral Network External / Internal

Hello, :smileyinfo:We have a double ring structure and we are trying to implement the most appropriate settings for the Wildfire, according to the scenario that we have.-A Cluster 2 firewalls External *OUT* Model PA-500 WildFire Version 52587-59292 (02/02/15)-A Cluster 2 firewalls Internal *IN Model PA-2050 WildFire Version 52588-59293 (02/...

SOC_CSG by • L4 Transporter
  • 3031 Views
  • 2 replies
  • 0 Likes

block tor

Hi,please tell me, how can i block tor in pa device,i create a rule with tor and tor2web , i set action to block but it is still runnning , it block skype tooIS that normalthank's in advanceRegards,

atelcom by • L3 Networker
  • 6373 Views
  • 6 replies
  • 0 Likes

RIP over VPN tunnel

Will RIP run over a VPN tunnel? I have a site to site to site VPN tunnel set up and an IP address set on my tunnel interface. I can ping the remote tunnel interface but I do not see the remote tunnel interface as a peer under RIP.

source user showing as unknown in traffic monitor

Found an issue on a customer's firewall. For some reason, the “source user” becomes unknown while students are using a web application called Istation. When that happens, the web traffic for that IP address becomes blocked by another policy. She wrote a specific policy for Istation traffic even if the user is unknown to resolve this issue. ...

GlobalProtect Client - connection establishment speed

Hi there,we're experiencing a not-really fast connection establishment from the GlobalProtect client; with client cert and user credentials for authentication.When the computer has been restarted it can take up to 25 seconds. A re-connect later takes approx. 10 seconds.Currenty we're using the CheckPoint Client for VPN (credentials only), and th...

485-2569 Dynamic Updates issue?

Anyone noting a large increase in triggering of following threat ID's after this Update (485-2569) was applied? ( threatid eq 36485 ) - OpenSSL SSL/TLS MITM vulnerability( threatid eq 36420 ) - OpenSSL TLS Heartbeat Information Disclosure Vulnerability - Reverse HeartbleedI've rolled it back as it was dropping a lot of HTTPS traffic for sites th...

jar file blocked by Data Filtering

Hello together,i have the problem that a jar-file would be blocked and categorized as a "Microsoft PE File". The PE Files are blocked by a "File Blocking Profile", thats okay, but jar files actually not blocked in that profile??? And i think this jar file shouldn't categorized as a PE File???Perhaps somebody has similar problems.Any suggestions?...

ITSama by • L2 Linker
  • 5087 Views
  • 3 replies
  • 0 Likes

Resolved! I can not access a website

Hello. I have a PA500 with firmware 6.0.7 In the Monitor menu - URL Filtering, I can see that the site is allowed, but the computer can not see. Connected directly to a modem see the page if it is working. How can I solve this problem? Thank you very much.

Panorama Save Devices

Is there anyway to save all devices from Panorama after a commit? I'm currently changing contexts in Panorama to each individual device and saving them that way, kind of a pain.Thanks!

Creating a scheduled report in GlobalProtect to see a VPN logins

Dear all,i have searched for a while now and was reading through the documentation. Unfortunately I didn't find anything.I would like to now if it is possible to get a report created which fulfills the following criteria:- logs all VPN logins done by the users- is sent out automaticly on a given timeThanks and regards,Rene

Rboehme by • L2 Linker
  • 1950 Views
  • 1 replies
  • 0 Likes
  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks