General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1267 Views
  • 0 replies
  • 0 Likes

PA-200 configuration for low bandwidth site

Hi there,

We have a PA-200 recently deployed at a low bandwidth field site. Monitoring the traffic shows the majority of traffic is from the PA-200 itself, checking for updates, Panorama, Wildfire, etc. Is there a way to configure a PA-200 to only per

...

rmilman by Not applicable
  • 3432 Views
  • 5 replies
  • 0 Likes

Address Object Cleanup

Does anybody have any suggestions on how to easily cleanup unused address objects. I recently migrated from Cisco ASA, and I'd like to cleanup some of the old garage objects that I brought over that are no longer being used.

Thanks!

bbilut by L3 Networker
  • 3731 Views
  • 3 replies
  • 0 Likes

Resolved! Possible to block specific files by hash?

If we are given a document which shows specific files used by bad actors in our sector, is it possible to have the PAN alert/block on these files? I have the SHA256 and MD5 hashes.

SDorsey by L4 Transporter
  • 11212 Views
  • 6 replies
  • 0 Likes

GlobalProtect - Disk encryption

Hi,

I already searched about this topic but I did not find anything useful.

I want to force our clients to have disk encryption enabled when they want to access our Network via GlobalProtect. I am able to check if the Encryption Software is installed

...

SSL Certificates CA Verisign

Hello,

we have import the CA Certificate from Verisign and want to activate the Antivirus function (policies).

But only the

"Trusted Root CA"

is available in the "Certificate Information"

the option "Forward Trust Certificate" is gray and not available.

B

...

Integrated User-ID Agent

Has anyone started using this new feature in PAN-OS 6.x?

I have 20+ firewalls and I'm really not looking forward to deploying/managing 20+ Kiwi Syslog servers. In our environment, we collect SNMP traps from our WLCs and send the parsed data to the UID

...

SSL decryption for public use ?

We provide internet access for public use (wifi hotspot). For better control and visibility, I would like to introduce SSL decryption (we already use it for our internal users). But there is no way I can deploy the certificate to those users (who I d

...

dieter_b by L4 Transporter
  • 3681 Views
  • 5 replies
  • 0 Likes

Global Protect time out - automatic reconnect attempt?

We're experiencing this with Windows and OSX clients.

The user connects on Monday, tunnel times out after 24 hours.

User doesn't disconnect but lets the connection time out naturally.   Immediately after time out, they receive an attempt to re-auth eve

...

kk555 by L0 Member
  • 12101 Views
  • 15 replies
  • 0 Likes

Upgrade to PAN-OS 6.0.4 - a virtual wire did not come up

Hello,

I have a PAN-OS 6.0.2 box that I upgraded to PAN-OS 6.0.4.  I have two vwires: one on interfaces 1/2 and another on 5/6.  The vwire on 5/6 did not come up.  The interfaces are "up" (green) as far as the web gui is concerned. The "Monitor" shows

...

cstech by L2 Linker
  • 5025 Views
  • 6 replies
  • 0 Likes

User-IDs Agent : Error : ldap_parse_page_control

I install User-ID Agent Version 6.0.2-3 on a Windows 2008R2.

I use the LDAP proxy on the firewall to read the AD.

I have the following message in the logs [Error 727] ldap_parse_page_control (cn = ...... (null)) return (93): Specified control was not f

...

yobitz2 by L0 Member
  • 2082 Views
  • 1 replies
  • 0 Likes

Interface goes Down when speed set to 1000!

Hi,

I was getting complains for slow download speed, so I tried to change the speed setting on interface from auto to 1000, but the interface went down.

Link status:

  Runtime link speed/duplex/state: unknown/unknown/down

  Configured link speed/duplex/s

...

Besfort by L2 Linker
  • 10629 Views
  • 9 replies
  • 0 Likes

With out ARP entry internet is not working.

Dear Friends,

I have 2 interfaces in PAN->lan zone and internet zone

ISP router-huawei mac is not learned in palo alto firewall..As a result, Internet not working

But when i add static ARP entry for huawei router in ISP interface, Internet is working fi

...

Satish by L4 Transporter
  • 5222 Views
  • 7 replies
  • 0 Likes
  • 24177 Posts
  • 117 Subscriptions
Top Solution Authors
Top Liked Authors
Labels