General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4142 Views
  • 0 replies
  • 0 Likes

Best practices for HA PANs and switch stack

For this scenario, assume a simple setup. Two firewalls in HA and two switches in a stack. Also assume the firewalls are in active/passive. Consider the below setup, each firewall has one physical link to separate switch members of the stack.In this configuration, if switch member 1 fails and firewall 1 is the active firewall, does it automatica...

SDorsey by L4 Transporter
  • 13529 Views
  • 14 replies
  • 0 Likes

Resolved! Mask MAC on interface

Does the PAN allow you to clone or mask the MAC address on an interface to one of your choosing?

SDorsey by L4 Transporter
  • 2756 Views
  • 2 replies
  • 0 Likes

Voip external server

I'm experiencing an issue with a connection to an external voip server.Directly attached to a PA-500 ethernet port there is a patton (fxo voip appliance).Now, I'm allowing any traffic to outside, any application.When I surf from that interface I can access external sites, but the issue seems to be NAT.Voip uses port 5060 udp.I can see the packet...

Global Protect - Split Tunnel

Is it possible with global protect and split tunnel setup to have policies applied for url filtering to the local client so that sites can be blocked in split tunnel mode?

markk96 by L3 Networker
  • 5597 Views
  • 9 replies
  • 0 Likes

Global Protect Client, portal error message: Client Certificate Error

We have upgraded 5 of our BranchOffice firewalls from 6.02 to 6.03 yesterday. All updates went fine except one: We are going to get an issue as soon as we want to connect via Global Protect to the Gateway. The window "Client Certificate Error" pops up:The error log shows: (T1636) 07/28/14 11:56:52:382 Error(8377): pan_obj_get_value() failed wit...

relsener by L0 Member
  • 6331 Views
  • 4 replies
  • 0 Likes

PPPoE issue

Hi Support Team.I have problem with PPPoE on Palo Alto PA 3050I config with true User and Password.my ISP reset MAC already.But PPPoE still failure.Pls help me.Thanks

dat.tran by L2 Linker
  • 3154 Views
  • 2 replies
  • 0 Likes

Scheduled Reports generate differently.

I have a number of reports we use to generate usage information, such as the top 100 applications used over 24 hours sorted by bytes.If I run this report manually with RUN NOW, it generates perfectly and everything is sorted like it should be.If we schedule this report to run automatically and email the results out to a subset of people, the sor...

kk555 by L0 Member
  • 5928 Views
  • 7 replies
  • 0 Likes

Resolved! Add source NAT: Bi-directional NAT breaks

Hello,1. I have three zones: Public, DMZ, PrivatePublic interface: bound to 164.67.80.124/26Private interface: bound to 192.168.1.1/24DMZ interface: bound to 192.168.2.1/242. I use bi-directional NAT to expose a few of the DMZ machines via their own public IP addresses:164.67.80.77 <-> 192.168.2.77164.67.80.78 <-> 192.168.2.78164.67....

cstech by L2 Linker
  • 9300 Views
  • 10 replies
  • 0 Likes

Global Protect Client 1.x.x ended?

HelloIs Global Protect Client 1.x.x ended? Since may 2014 when we got 1.2.10 there isn't any new update when 2.0.x got two new versions.Is a time to move to 2.0.x version?With regardsSLawek

_slv_ by L4 Transporter
  • 2116 Views
  • 1 replies
  • 0 Likes
  • 24340 Posts
  • 124 Subscriptions
Top Liked Authors
Labels