General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Dropbox Uploaders

I've noticed that when using the dropbox basic uploader the filenames are logged under data filtering correctly however when you drag and drop files into dropbox the filename is recorded as "chunked_upload".

Is there a way to figure out the actual fil

...

depps by L1 Bithead
  • 2563 Views
  • 2 replies
  • 0 Likes

Windows Update Issue

I have an issue with our fw blocking windows update on PC's despite having the ms-update application added to the Allowed_Downloads policy which is above the Web_Access policy.

In the logs I see the wuredist.cab being blocked which is a component of m

...

depps by L1 Bithead
  • 2005 Views
  • 0 replies
  • 0 Likes

Palo Alto support Windows Server 2012 R2?

Hi,

At this moment we user Userd-ID agents on our WIndows Server 2008 R2 AD servers. But we want to upgrade all the servers to Windows Server 2012 R2. Does Palo Alto already support userd-ID agents on Windows Server 2012 R2 and what firmware needs to

...

ZEBIT by L3 Networker
  • 2569 Views
  • 4 replies
  • 0 Likes

HA Split Brain After Upgrade from 5.0.8 to 6.0.3

We have a pair of 5050s that we recently tried to upgrade, however we ran into an issue where once both of the PANs were upgraded they went into split brain. Its currently setup with some basic HA active/standby settings for 5.0. so I'm not sure why

...

Palo GUI: Selecting lines (Multiselect)

Hello,

I would like to put 20 FQDN Names in a Group ir directly in a policy.

AAAA1

AAAA2

AAAA3

AAAA4

....

AAA20

You know what I mean, it takes a long time :=(( ... or there is a way how to select more names I do not know.

Roman

rkra by L2 Linker
  • 2424 Views
  • 5 replies
  • 0 Likes

What kinds FW can decode ?

Hello,

I have seen the below link and I have known FW can not decode Sliverlight about filename.

Filenames of Hotmail Email Attachments do not Appear in the Data Filtering Logs

So I want to know all kinds list which FW can decode for filename.

Please let

...

QoS on a sub interface

I see from previous discussion, QoS on a sub interface has been a request.  I have a 3050 I'm working with and was wondering if there are any updates?

tharpham by L1 Bithead
  • 2893 Views
  • 5 replies
  • 0 Likes

Resolved! How to REJECT instead of DROP?

Try as I might, I cannot find a way to do the equivalent of the venerable iptables target REJECT --with-icmp-ureachable or --with-tcp-reset for basic firewalling on a 4020.


This is handy for bouncing internal clients quickly, whereas DROP is better to

...

Priyan by Not applicable
  • 14671 Views
  • 11 replies
  • 1 Likes

Dynamic DNS URL Redirect Control

Hello,

Most of the "Dynamic DNS" sites are categorized as Computer and Internet Info (PANDB).  On occasion a device will get infected because of a Dynamic DNS redirect to a malicious site.  The initial URL connection is through one of the DDNS sites. 

...

CRHC by L4 Transporter
  • 2198 Views
  • 1 replies
  • 0 Likes

V-Wire Mode with trunk

Hey Guys,

i am about to deploy PaloAlto 5020 in a v-wire mode with trunk on them, does any one has any known issues that i may encounter

here is the topology

Current: switch ====(trunk)===== cisco firewall

new: switch======(trunk)=====PaloAlto (vwire)==

...

Harshit by L3 Networker
  • 1861 Views
  • 2 replies
  • 0 Likes

VPN Global Protect

Hello everbody

Configured on a global protect our customers and all this working well, just a little problem that we try,can  not send icmp packets via hostname only via IP Address, on your local network can ping both via hostname as IP Address. I'm p

...

  • 24195 Posts
  • 100 Subscriptions
Labels