General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

My palot blocks the access to internet

hello Paul
I was placing the 200 pa for a client in transparent mode.
positions of lan n 'happens more to go on the net.
Here the architecture of the network
before.
(lan) ==> (ISA) ==> Internet
RAS
--------------------------------------------------

...

camagate by L1 Bithead
  • 1811 Views
  • 2 replies
  • 0 Likes

Having trouble granting access for an application

Hi!

One of our customers have RDP access to a server, works like a charm.

And now I was about to grant access to an application using port 4850 and 4851, but it would seem that this wouldn't be that simple.

I've attached the NAT of the working RDP, and

...

Resolved! vsys and subinterfaces

Hi

I have an aggregate interface with a subinterface assigned to vsys1. Is it possible for another subinterface of the same aggregate to be assigned to a different vsys?

i.e.

ae1.10 (vlan tag 10), layer 3 type, assigned to vsys1

ae1.20 (vlan tab 20), lay

...

SteveMc by L1 Bithead
  • 4854 Views
  • 2 replies
  • 0 Likes

Resolved! Query job expired when exporting logs to CSV in Panorama

Hi,

I am trying to export URL logs from Panorama to a csv. file, using the Gui, but after a while of Panorama trying to export them, I get the error: Query job expired.

I am trying to export all the URL logs for a user, and there are quite a lot of the

...

MMCiobanu by L3 Networker
  • 2749 Views
  • 2 replies
  • 0 Likes

AD Authentication Problem with Secondary Firewall

HI friends..


I am having two Palo Alto Network ( PAN-PA-3020 ) firewall installed in HA  mode (Active-Passive) .

  My problem is when ever my Primary FW goes down or change to passive and Secondary become Active, My Active directory authentication  bec

...

Satish by L4 Transporter
  • 4308 Views
  • 14 replies
  • 0 Likes

HA2 backup peak

Hi,

We have two PA-4050 in HA pair with two HA2 link, primary connected on dedicated port and HA2 backup connected to Ethernet port. We had a peak in HA2 backup link (images are from passive and active PAN):

There is nothing unusual for HA pair in syst

...

Problems with SSL-Decryption

Hi,

since a few days, we have more and more websites, which we are unable to login. After further investigation i'm sure there's something wrong with SSL-decryption, if I exclude the IP from encryption the sites work. But formerly the problem doesn't

...

ITSama by L2 Linker
  • 3391 Views
  • 5 replies
  • 0 Likes

captive portal issue

Hi All,

We configured captive portal-redirect with local db

when unknown users(who are not in AD,belongs to local db) redirected and web form is authenticated.

But the problem is they can't browse internet. Browser shows" page not loaded" to those user

...

Javith by L3 Networker
  • 2337 Views
  • 3 replies
  • 0 Likes

Resolved! Domain Administrator no Authentication??

Has anybody an idea, why the Active-Directory authentication works from every location in our company with every domain-user, but if I use the Domain-Administrator-Account I always forced to use the login credentials with Captive-Portal??

ITSama by L2 Linker
  • 4250 Views
  • 6 replies
  • 0 Likes

Resolved! Trusting QOS markings

will the PAN-OS automatically trust markings applied by other systems on the network or do I need to make a policy in addition to the policy on the rest of the network?

kkeeton by L2 Linker
  • 8998 Views
  • 10 replies
  • 0 Likes

email notification

Is it possible to set up a notification by email to let you know when one and only one vpn tunnel goes down? I also want to be able to turn it off once I am done troubleshooting

infotech by L4 Transporter
  • 3500 Views
  • 8 replies
  • 0 Likes

Allow Spotify authentication, but not streaming

It there a way to allow Spotify to authenticate, but disallow streaming (both from web and apps?)

As-is there are only one AppID for Spotify, and this blocks everything.

Users having the app in offline mode has go go online every 30 day to regain new 3

...

Start VPN from C# or script

Hello!

Is there a way to instruct the Windows GlobalProtect Agent 2.0.3-5 (that ist completely configured for the current Windows User) to Start the VPN from C# (or from within a script)?

Thanks for any Ideas,

Jürgen.

  • 24195 Posts
  • 100 Subscriptions
Top Liked Authors
Labels