General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1906 Views
  • 0 replies
  • 0 Likes

Resolved! Not able to Push the policy to a device

Hello ,

Can any one please explain me the error i am getting while pushing the policies to a device of a device group.

I want to push the policies only to the particular device ,member of device group.

Thanks

tiwara by L3 Networker
  • 3233 Views
  • 2 replies
  • 0 Likes

Resolved! How to Configure HA on PAN-OS 5.0.6

Hi,

Any advise configuring HA on mentioned PAN-OS as documentation seems not very detailed..

Have configured HA for control plane with ip addresses /30 , enabled HA, group 1 and Peer HA ip address; after commit am getting generic failure error

Cheers

paul_w by L2 Linker
  • 4225 Views
  • 3 replies
  • 0 Likes

Resolved! PA blocking returned traffic!!!

Hi,

I've deployed PA-500 recently, and I'm experiencing an interesting situation.

PA-500 is deployed in virtual-wire, and I'm filtering only my main ISP connection (ISP 1). The connection for ISP 2 goes directly to the router.

We have a web server, whic

...

Besfort by L2 Linker
  • 3895 Views
  • 2 replies
  • 0 Likes

HA broken after upgrading to 6.0.3

Hi,

We have just upgraded our 5020s and 3020s to 6.0.3 and encountered an issue, where the secondary device became the Active one and the primary displays this error, only on the 5020:

does anybody else had this issue or knows how to solve it?

Thank you

...

MMCiobanu by L3 Networker
  • 15610 Views
  • 28 replies
  • 0 Likes

Resolved! 'enable-user-identification' turned on!

Hi everyone,

I wanted to do user based filtering on PA-500, but after I've successfully connected PA with active directory, and applied a security policy on user based I get this warning:

Warning: Rulebase 'security'

Rule 'LAN-r2'; Zone 'LAN' does not h

...

Besfort by L2 Linker
  • 3243 Views
  • 2 replies
  • 0 Likes

HA queue full

Hi, im receiving this snmp trap in my Palo Alto (PA-3020 PANOS 6.0.3). Checking the system logs i see each 15 mins this log message "HA-queue-full". Why is this happening?

SOC_CSG by L4 Transporter
  • 6372 Views
  • 13 replies
  • 0 Likes

HA queue is full

Hi there,

I'm not sure if anyone else has seen this alert show up on their devices but I have Critical system messages sent to me by email and I have received this afternoon every 15 minutes a message saying "HA queue is full". I made a small tweak to

...

UKRB by L3 Networker
  • 4115 Views
  • 4 replies
  • 1 Likes

Resolved! URL Rewrite - any update in new PanOS 4.1?

We are increasingly seeing the need for a URL rewrite feature - we had hoped to use it for one of the ways to force Google SafeSearch (vs. the existing option of blocking searches using an app signature)

We now would like to use YouTube for Schools, w

...

keklund by L1 Bithead
  • 15203 Views
  • 25 replies
  • 1 Likes

Failed to execute op command

We frequently face an error for fetching the group-mapping in the user-id tab. The error is normally shown up as failed to execute op command. One of the reason can be invalid credentials in the ldap configuration

Troubleshoot this error with Tail fol

...

Westcon2 by L3 Networker
  • 7254 Views
  • 5 replies
  • 0 Likes

Turn off Application ID globally?

Can one turn off the application awarenes globally to set up a PAN as a L4 firewall? Trying to get some comparison stats against the old L4 only (non PAN) firewall and the new PAN.

thanks.

blarney by Not applicable
  • 4378 Views
  • 6 replies
  • 0 Likes

PAN Dual ISP Failver Best Practices

I have setup dozens of PANs with multiple ISPs and failover but have some questions in regards to best practices..

1. Is PBF the only way to handle failover? If not, can the same be achieved via HA Link/path monitoring or is that specifically for devi

...

SDorsey by L4 Transporter
  • 7502 Views
  • 11 replies
  • 0 Likes

Unknown File Types

Hi all,

we like to block or be alert when the file types .edrw and .easm (eDrawing) are passing the PA. Currently nothing is shown in the Monitoring Data Filtering.

Any idea how to get PAN to update file types in security profiles? Can I somehow report

...

Hithead by L4 Transporter
  • 4483 Views
  • 5 replies
  • 0 Likes

NAT Performance Issue

Hi All,


I recently migrated a client from a Fortinet firewall to a PANW.  Most of the Virtual IPs from the Fortinet were migrated as bidirectional Source NATs.


One specific server had issues where outside traffic would intermittently not be able to con

...

  • 24257 Posts
  • 117 Subscriptions
Top Liked Authors
Labels