This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

ONE External IP to MANY Internal IP NAT

I believe I know the answer after looking around.We have NATs that work fine when it is 1to1.But what about 1 External IP that represents many Internal Hosts? We have multiple websites that when you do a lookup in DNS, they all point to a singular public facing IP. That public facing IP is represented by our ISA. External ...

greeng by • L2 Linker
  • 7149 Views
  • 7 replies
  • 0 Likes

Server certificate verification failed

Hi there,I wonder if I can finally resolve my continuous problems with GP and Windows machines.I have 0 problems with Android and Apple devices but Windows XP,7,8 or 8.1 give identical outcome. Problems, Problems and more problems.Please let me start from the configuration:1.2. Gateway3. cert4. cert againHowever, each time I try to logon I conti...

Has anyone been able to correlate performance issues due to the number of security rules present?

I was thinking about writing very specific security rules for around 15 hosts. The rules would essentially whitelist traffic by destination ips and application. I am somewhat concerned that adding this many additional rules could potentially slow traffic down an appreciable amount for traffic that would match on rules below these.Has anyone ru...

bgirdner by • L2 Linker
  • 3219 Views
  • 1 replies
  • 0 Likes

Advice blocking URl/ZIP

Hi,We are receiving the same emails,which last 28/11/14, infected our system with cryptoloker. These links come from different domains but have in common the following urlhttp://xxxxxxxx.xx/Billing/invoice.zip. How could we avoid that if someone clicks the link, not end infecting our systems? any advice?????thanks

SOC_CSG by • L4 Transporter
  • 6770 Views
  • 9 replies
  • 0 Likes

VPN commands

Hi Friends,I need cmd for tunnel up time status.I mean I want to look how many days tunnel is up and down. RegardsSatish

Satish by • L4 Transporter
  • 3016 Views
  • 3 replies
  • 0 Likes

Optimization tips for GlobalProtect?

Hi Guys,Does anyone have any optimization tips that they've done for GlobalProtect? Looking for ways to speed up auth in the event the client gets disconnected when the device switches from wifi to cellular network. What we are seeing is it disconnects but doesn't connect or it takes awhile before it reconnects. using it on iOS.Thanks,

x by • L1 Bithead
  • 3933 Views
  • 2 replies
  • 0 Likes

problema con equipos PAN-500 en modo Activo-Pasivo

Tenemos el siguiente problema, nosotros hicimos una migración a la versión 5.0.8 en ambos equipos y no tuvimos ningun inconveniente, el problema viene hoy cuando queremos hacer modificaciones al equipo y nos muestra un error en la interface 1/6 la cual se configuro en modo HA no se porque pero no tiene ningun cable conectado ni esta operacional,...

Is it possible and OK to disable user cert caching?

After revoking a cert being for GP, the device is still able to connect. I found that it is cached somehow. So is it possible and OK to disable the caching of user certs for authentication?> show system setting ssl-decrypt settingvsys : vsys1Forward Proxy Ready : yesInbound Proxy Ready : yesDisable...

zac_hg by • L1 Bithead
  • 6291 Views
  • 4 replies
  • 0 Likes

Resolved! Contact a Sales Engineer

During last night's trouble call the technician mentioned something like 'you have access to a sales (or service) engineer, and we'll have him contact you. It's part of your contract.'Wonderful. Who is this person and how can I find him? Searched on the site but no obvious links titled 'contact your SE'.Thanks,~brian

bdunbar by • L3 Networker
  • 4153 Views
  • 3 replies
  • 0 Likes

packet based attack

Hi,Will Choosing all options cause a false positive ?(especially IP option boxes)And how can we see these drops ?Unable to See the Threat Logs for Packet Based AttackThanks

PanIst by • L3 Networker
  • 2207 Views
  • 1 replies
  • 0 Likes

Cannot add zone to security rule from panorama

Hello there:I'm new to palo alto through Panorama, so please excuse me if this is a silly issue. I created a template and a device group (without devices in it yet) and started to create everything else (addresses, groups, users, nats, sec policies, etc.). When I try to add a security policy and trying to select one of the already created zones,...

  • 24435 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks