General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4117 Views
  • 0 replies
  • 0 Likes

Skype manager custom application

Hello,I'm actually blocking skype application but I would like to allow skype manager web site (https://manager.skype.com/).The web site manager.skype.com is blocked because recognized as skype application.The idea is to build a application that allow skype with hostname https://manager.skype.com/ The custom app I created is here below but it do...

Dropbox uploading

For dropbox on the web. I need to block uploading, this works with chrome, ie. but with firefox if i create a File-Blocking policy with the following. Firefox will not stop the dropbox upload. IE and Chrome will. Any application upload blockapplication web-browsing upload continueIf I remove web-browsing application from the policy object the...

markk96 by L3 Networker
  • 3522 Views
  • 4 replies
  • 0 Likes

Terminal Server Agent

Is there anyway to import a list of Terminal Server Agents installed to the firewall?I have about 250 Terminal servers.

markk96 by L3 Networker
  • 4615 Views
  • 4 replies
  • 0 Likes

Resolved! CLI listing of all Security Policies

We are trying to reduce our unused Security Policies. We created a custom report to show Security policies run in the past 30 days.I would like a listing of all Security Policies and then remove the Policies that have not been run in 30 days. I am trying to figure a CLI command to list all security Policies. The custom report only shows polic...

Jshively1 by Not applicable
  • 9910 Views
  • 5 replies
  • 0 Likes

PAN failover causes Cisco issues

Hi Guys,Has anyone seen the PAN causing an issue with Cisco ASAs when doing a failover? I don't have much details yet but wanted to see if anyone has seen this or something similar.Thank you in advance.

x by L1 Bithead
  • 6145 Views
  • 7 replies
  • 0 Likes

security policies: application vs service

how are application and service treated in a given policy?multiple apps in a policy?multiple services in a policy?apps and services in a policy?how are the different scenarios and'ed or or'ed?ThanksDavid

Can I make custom application from MIME type?

Hello,I want to make custom application(or vulnerability) from MIME type.EXE of MIME Type is 'application/x-msdownload'So I made two customer applications as the following patterns.1. application/x\-msdownload2. \x61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6d 73 64 6f 77 6e 6c 6f 61 64\xBut FW detected these custom applications which are tried to...

Resolved! SSL Ciphers

Does anyone have the ciphers list to configure on ISS and Apache that will fully support decryption? We're running PAN-OS 6.0.

mharding by L4 Transporter
  • 6217 Views
  • 4 replies
  • 0 Likes

Resolved! GlobalProtect Gateway on Different IP address

Let's say we have an external facing interface Ethernet1/3 with Ip address of 1.1.1.14/28. The upstream isp router is 1.1.1.1 all other addresses (1.1.1.2-1.1.1.14) are routed to the Palo Alto and in use for various web services, etc..Per the documentation I can find it looks like you have to set the Global Protect gateway IP address to th...

travisj by L2 Linker
  • 6412 Views
  • 4 replies
  • 0 Likes

Resolved! VPN port and default port the same?

Hallo all,i have only one phyical ethernet interface on firewall which is facing the internet. I also want to make this PA firewall as an IPSEC Tunnel endpoint. So all my internal traffic uses this ethernet interface to go to internet. And VPN traffic should terminate on the same interface.Is this possible? If yes, how can I implement it? Any do...

Basic noobie question.

I am looking to what I would call port address translation, but am unfamiliar with how to do it on the PA. Basically I need a public IP to route SNMP traffic to one inside address, and syslog traffic to another inside address. This will also only apply to a single host from the outside. Can someone give me high level steps to what I need to conf...

mcocat by Not applicable
  • 4170 Views
  • 6 replies
  • 0 Likes

Resolved! WildFire Question

Have a question about the functionality of WildFire. Here is the scenario (assume we have a WildFire subscription so we are getting updates every 30 minutes):User gets an email to download "file.exe" at 0800This hash does not match anything and is sent up to the cloud for analysis.Analysis confirms this file is / has malware - it has not seen t...

mrsold by Not applicable
  • 7239 Views
  • 7 replies
  • 0 Likes
  • 24334 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels