General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4244 Views
  • 0 replies
  • 0 Likes

Resolved! Panorama Botnet View

Hi All,Where do you find the Botnet monitor and reports for firewalls running 4.x from a Panorama interface running 4.x? And minimum level permission is required in order to see these Botnet reports?Appreciate the assistance.

apc050 by Not applicable
  • 7265 Views
  • 6 replies
  • 0 Likes

Active Directory Users not Authenticating to GP

Hi,We configured agentless User-ID with our PAN OS 5.0.2. We created policies using the AD usernames and it is working fine.However, We are trying to configure our GP to authenticate using the AD users. This is not working and we are getting the following error when trying to login:User is not in allowlistdescription contains 'User \'abc\user1\'...

rsaber by L1 Bithead
  • 3403 Views
  • 3 replies
  • 0 Likes

Resolved! Disabled Vulnerability Signatures: FTP evasion attack (id:30401)

HelloCould someone explain me why signature FTP evasion attack (id:30401) was disabled in thread update version 453?This signature wasn't replaced by new one. Bruteforce attacs on FTP serwers still exist and nothing will change in this case.With regardsSLawek

_slv_ by L4 Transporter
  • 4447 Views
  • 3 replies
  • 0 Likes

Resolved! Using Local DB and LDAP for Global Protect

Hi All,Is it possible to have Local and LDAP users authenticate to the Global Protect Client.In the GP configuration, I can only choose one Authentication Profile, which is chosen for Local DB.I tried to configure another GP Portal but I could not use the same interface and IP Address.So, is the only solution is to create another GP Portal using...

rsaber by L1 Bithead
  • 4263 Views
  • 3 replies
  • 0 Likes

Best practices for HA PANs and switch stack

For this scenario, assume a simple setup. Two firewalls in HA and two switches in a stack. Also assume the firewalls are in active/passive. Consider the below setup, each firewall has one physical link to separate switch members of the stack.In this configuration, if switch member 1 fails and firewall 1 is the active firewall, does it automatica...

SDorsey by L4 Transporter
  • 13708 Views
  • 14 replies
  • 0 Likes

Resolved! Mask MAC on interface

Does the PAN allow you to clone or mask the MAC address on an interface to one of your choosing?

SDorsey by L4 Transporter
  • 2784 Views
  • 2 replies
  • 0 Likes

Voip external server

I'm experiencing an issue with a connection to an external voip server.Directly attached to a PA-500 ethernet port there is a patton (fxo voip appliance).Now, I'm allowing any traffic to outside, any application.When I surf from that interface I can access external sites, but the issue seems to be NAT.Voip uses port 5060 udp.I can see the packet...

Global Protect - Split Tunnel

Is it possible with global protect and split tunnel setup to have policies applied for url filtering to the local client so that sites can be blocked in split tunnel mode?

markk96 by L3 Networker
  • 5661 Views
  • 9 replies
  • 0 Likes

Global Protect Client, portal error message: Client Certificate Error

We have upgraded 5 of our BranchOffice firewalls from 6.02 to 6.03 yesterday. All updates went fine except one: We are going to get an issue as soon as we want to connect via Global Protect to the Gateway. The window "Client Certificate Error" pops up:The error log shows: (T1636) 07/28/14 11:56:52:382 Error(8377): pan_obj_get_value() failed wit...

relsener by L0 Member
  • 6438 Views
  • 4 replies
  • 0 Likes

PPPoE issue

Hi Support Team.I have problem with PPPoE on Palo Alto PA 3050I config with true User and Password.my ISP reset MAC already.But PPPoE still failure.Pls help me.Thanks

dat.tran by L2 Linker
  • 3181 Views
  • 2 replies
  • 0 Likes
  • 24359 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels