This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

PPPoE issue

Hi Support Team.I have problem with PPPoE on Palo Alto PA 3050I config with true User and Password.my ISP reset MAC already.But PPPoE still failure.Pls help me.Thanks

dat.tran by • L2 Linker
  • 3243 Views
  • 2 replies
  • 0 Likes

Scheduled Reports generate differently.

I have a number of reports we use to generate usage information, such as the top 100 applications used over 24 hours sorted by bytes.If I run this report manually with RUN NOW, it generates perfectly and everything is sorted like it should be.If we schedule this report to run automatically and email the results out to a subset of people, the sor...

kk555 by • L0 Member
  • 6162 Views
  • 7 replies
  • 0 Likes

Resolved! Add source NAT: Bi-directional NAT breaks

Hello,1. I have three zones: Public, DMZ, PrivatePublic interface: bound to 164.67.80.124/26Private interface: bound to 192.168.1.1/24DMZ interface: bound to 192.168.2.1/242. I use bi-directional NAT to expose a few of the DMZ machines via their own public IP addresses:164.67.80.77 <-> 192.168.2.77164.67.80.78 <-> 192.168.2.78164.67....

cstech by • L2 Linker
  • 9906 Views
  • 10 replies
  • 0 Likes

Global Protect Client 1.x.x ended?

HelloIs Global Protect Client 1.x.x ended? Since may 2014 when we got 1.2.10 there isn't any new update when 2.0.x got two new versions.Is a time to move to 2.0.x version?With regardsSLawek

_slv_ by • L4 Transporter
  • 2190 Views
  • 1 replies
  • 0 Likes

Policy Based Forwarding applications

I realize that PBF application based routing is limited to a subset of applications supported.We're specifically looking to use PBF for Outlook-Web-Online and it's not in the list but many other things are, like MS-OCS-* and SMTP, etc...Do we know why some applications are listed and why?Is it possible to make a feature request to support this a...

kk555 by • L0 Member
  • 4289 Views
  • 2 replies
  • 0 Likes

PA-200 configuration for low bandwidth site

Hi there,We have a PA-200 recently deployed at a low bandwidth field site. Monitoring the traffic shows the majority of traffic is from the PA-200 itself, checking for updates, Panorama, Wildfire, etc. Is there a way to configure a PA-200 to only perform this on a scheduled basis? Right now it's transferring about 400Mb per day, which puts it wa...

rmilman by • Not applicable
  • 4162 Views
  • 5 replies
  • 0 Likes

Address Object Cleanup

Does anybody have any suggestions on how to easily cleanup unused address objects. I recently migrated from Cisco ASA, and I'd like to cleanup some of the old garage objects that I brought over that are no longer being used.Thanks!

bbilut by • L3 Networker
  • 4296 Views
  • 3 replies
  • 0 Likes

Resolved! Possible to block specific files by hash?

If we are given a document which shows specific files used by bad actors in our sector, is it possible to have the PAN alert/block on these files? I have the SHA256 and MD5 hashes.

SDorsey by • L4 Transporter
  • 12061 Views
  • 6 replies
  • 0 Likes

GlobalProtect - Disk encryption

Hi, I already searched about this topic but I did not find anything useful.I want to force our clients to have disk encryption enabled when they want to access our Network via GlobalProtect. I am able to check if the Encryption Software is installed (File Vault in this case) but I want to check if the Disk is encrypted too. I know I could do tha...

SSL Certificates CA Verisign

Hello,we have import the CA Certificate from Verisign and want to activate the Antivirus function (policies).But only the "Trusted Root CA"is available in the "Certificate Information"the option "Forward Trust Certificate" is gray and not available.But that the function what we need.We will check upload traffic to the servers in the trust lan o...

netmaster by • L1 Bithead
  • 10297 Views
  • 15 replies
  • 0 Likes

Integrated User-ID Agent

Has anyone started using this new feature in PAN-OS 6.x?I have 20+ firewalls and I'm really not looking forward to deploying/managing 20+ Kiwi Syslog servers. In our environment, we collect SNMP traps from our WLCs and send the parsed data to the UID Agent Server. It works, but way too much to administer and troubleshoot. Have any of you dumped ...

SSL decryption for public use ?

We provide internet access for public use (wifi hotspot). For better control and visibility, I would like to introduce SSL decryption (we already use it for our internal users). But there is no way I can deploy the certificate to those users (who I don't know and don't control their devices).Is there any way I can enhance control and visibility ...

dieter_b by • L4 Transporter
  • 4358 Views
  • 5 replies
  • 0 Likes

Global Protect time out - automatic reconnect attempt?

We're experiencing this with Windows and OSX clients.The user connects on Monday, tunnel times out after 24 hours.User doesn't disconnect but lets the connection time out naturally. Immediately after time out, they receive an attempt to re-auth even though they had not instigated a new connection.This has resulted in some locked tokens and gen...

kk555 by • L0 Member
  • 14694 Views
  • 15 replies
  • 0 Likes
  • 24404 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks