This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 221 Views
  • 0 replies
  • 0 Likes

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by • Community Team Member
  • 900 Views
  • 0 replies
  • 0 Likes

MTU problem PA-500 5.0.6

I have a PA-500 5.0.6

From inside my network I see an MTU maximum of 1023.  From outside through my ISP I see the MTU that I expect of 1492.  Traffic through the PA sees an MTU of 1023.  I haven't changed the interfaces.  Is this possible to fix?  Whe

...

gmoss by • L1 Bithead
  • 3847 Views
  • 3 replies
  • 0 Likes

Resolved! HTTPS traffic suddenly blocked

Hi,

We have had same issue twice in two days, where the firewalls would suddenly block HTTPS traffic; this happened on two platforms, PA-3020 and PA-5020, both running 5.0.8 PAN-OS, and the work around was to create a "Do-not decrypt all" decryption p

...

MMCiobanu by • L3 Networker
  • 6242 Views
  • 2 replies
  • 0 Likes

Resolved! Security Policy Limit Alarms

I'm trying to setup an alarm to trigger is we have excessive drops on a firewall rule.

When looking at this functionality the Help section states:-

"Use Security Policy Tags to specify the tags for which the rule limit thresholds will generate alarms.

...

apackard by • L4 Transporter
  • 4697 Views
  • 3 replies
  • 0 Likes

GameOver Zeus

Does PaloAlto provide any protection against this malware, either in downloading the virus, making the DNS quesries to the list of .ru domains that the FBI released on June 4th, or in the call backs that it makes?

Panorama - Simple Question

We are currently running Panorama on a VM and need to take it down to add more resources to it.  Will taking down Panorama or rebooting it have any affect on connectivity for the 2 PAN's that it manages?

SSL Decryption Certificate

For SSL Decryption does the cert on the PALO need to be issued from the same enterprise cert chain as the workstations, or does the cert on the workstation have to match the cert on the PALO exactly?  We have about 2000 workstations that have been is

...

markk96 by • L3 Networker
  • 1637 Views
  • 1 replies
  • 0 Likes

Panorama without direct internet connection

Hi,

I have a setup where panorama is not allowed direct internet connection, therefore I would like a setup where a server in a DMZ sone gets the updates from Paloaltonetworks.com and my panorama installation gets the update from that server. Has anyb

...

kristian by • L3 Networker
  • 2071 Views
  • 1 replies
  • 0 Likes

SSL Decryption Certificate

For SSL Decryption does the cert on the PALO need to be issued from the same enterprise cert chain as the workstations, or does the cert on the workstation have to match the cert on the PALO exactly?  We have about 2000 workstations that have been is

...

markk96 by • L3 Networker
  • 1528 Views
  • 1 replies
  • 0 Likes

Resolved! issue with SSL decrypt-forward proxy

Customer Network configured with SSL decrypt-forward proxy. Now they can't able to browse more sites (eg:birdres.com, sap.snn,etc).

They were not satisfied with exclude ssl decrypt. (due to more no.of sites in exclude list). Is there any other way?

Th

...

Javith by • L3 Networker
  • 4126 Views
  • 8 replies
  • 0 Likes

Application Groups "service" in security policy

I have the following scenario I came across and just curious if this is expected behavior. It is recommended when "whitelisting" and application to use the application-default service (so it only works on its default port), or if you are "blacklistin

...

froggyj by • Not applicable
  • 3358 Views
  • 2 replies
  • 0 Likes

Resolved! ports unknown allowed

Hi all,

We have an application group that specifies the applications to allow from untrust to our DMZ. Mostly its just web browsing, ssl, pop and smtp. We are not allowing ms smb port 445 or Port 135 msrpc.

Our recent PCI security scans are telling us

...

  • 24018 Posts
  • 115 Subscriptions
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2025 - Palo Alto Networks