This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Dynamic "Allow" Lists possible?

Greetings,I'm migrating from regionalized TMG environment, to a distributed Palo Alto design at a great number of sites. One of the banes of our TMG existence is maintaining a list of allowed internet sites that anyone on the network can get to VIA a trust to untrust policy (Even those non-domain devices). Things like HR sites, retirement, heal...

aklugherz by • Not applicable
  • 4111 Views
  • 6 replies
  • 0 Likes

Multiple Admins and what happens with a commit?

Hello,If I have multiple admins working on the same PA, when the second admin logs on do they see the first admins candidate config, or do they get a copy of the running config? When a commit is done, does it commit only the changes the admin makes, or the changes from both admins?I understand that the config lock would prevent the second admit...

eosminer by • L1 Bithead
  • 4041 Views
  • 3 replies
  • 0 Likes

WGeneric.dilll threat ID (1270326)

Anyone else getting clobbered with Threat ID 1270326 alerts today?Seems to be firing on attempts to download a flash file.Any/all insights appreciated. Tnx! Tomthreatid:Virus/Win32.WGeneric.dilll(1270326)

TomS by • L1 Bithead
  • 4211 Views
  • 6 replies
  • 0 Likes

Resolved! PA-500 CLI and web interface unbearably slow

"show system resources" indicates CPU is 80% idle... yet can take 90 seconds to display results. Logging into the web interface can take 60 seconds. Committing insignificant changes can take 5 minutes (Maybe this is excusable). These are not exaggerations.How can I troubleshoot the source of this latency? I'd love to hear an responses such as...

cstech by • L2 Linker
  • 13213 Views
  • 11 replies
  • 1 Likes

Resolved! SHA-1 unsupported

Hi all,I apologize if the answer is already there, but we did not find it.Is there any knowledge that the PAN will not support SHA-1 because it is outdated?Thanks,Vesna.

How do I create a report for QoS?

I don't see any canned reports and I don't see a way to create a custom report for this.I need to make sure my QoS rules are working and I can't sit and watch the graphs all day and all night.Mike

mike_cc by • Not applicable
  • 3027 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama cluster web certificate

panorama cluster web certificate | Palo Alto Networks Live Hello All, I wanna use our PKI and created certificate for primary Panorama to not get WEB cert. error but I`m not able to do so on standby as it saing:"Configuration changes not allowed on the passive Panorama"Is there any step I`m missing or its not possible to do so?THX for any r...

radp by • L1 Bithead
  • 5334 Views
  • 5 replies
  • 0 Likes

reconfigure DNS and PAN3020 firewall

Currently i two AD dns zones in on my DNS server (windows):mycompanydom.com - internal domainmycompanyplan.com - external domain where all our internet webservers and web applications live. my A records in mycompanyplan.com point to internal non routable IPaddress for each internal server so the traffic does not go out the firewall and back in. ...

Managing Power Supplies - Parallel or Series?

We had something weird happen last night. I had a PAN 4050 HA Pair that I had to move the primary power supplies to a different PDU with a lower load. In each case, the firewall rebooted - we had no warning, no notification, they didn't throw any logs.We were fortunate last night - it was midnight on the east coast so it probably went unnotic...

Virtual Switch in PANOS

Hello,Would like to hear whether anyone has converted Check Point VSX virtual switch to like Palo Alto capabilityCurrently in the process of planning migration from Check Point VSX to Palo Alto VSYS. Check Point VSX has a virtual switch capability similar to VMware where multiple virtual systems can "share" a physical connection (port) to a net...

ms-lync-online

Hi AllDoes anyone have any experience or customer with PAN and ms-lync-onlineIs there anything else needed to allow access to the online version apart from allowing that application traffic through.It seems to be working intermittently with the customer.thanks

mphelan by • L0 Member
  • 3836 Views
  • 5 replies
  • 0 Likes

Traffic Log Search Syntax

What would be the syntax used to create a filter for Traffic logs where one wants to display all traffic initiating or terminating from/to addresses a pre-defined "address-group" ?

  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks