This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Log message

Hello there, I had received several log message " XDR service cyserver was stopped on Desktopxxx" although this devices have running cortex agent. What are the scenarios that this log message are generated and what are the cases that the cortex agent get stopped.

Resolved! App version mismatch

Hi All,My dashboard shows a "App Version Mismatch" in a HA setup. The active is supposed to download the app version and sync it to the passive.To confound the issue as per the following the "active" firewall is running the older version causing the mismatch:admin@(active)> show high-availability all | match Application Application Conte...

BTS_MS by • L2 Linker
  • 34264 Views
  • 13 replies
  • 0 Likes

Fuel Spark Event Discussion: Web Proxy and SD-WAN (July 25, 2024)

Delve into Fuel User Group, the sister community to LIVEcommunity, tailored for Palo Alto Networks users. Free membership in Fuel brings a myriad of benefits tailored to your interests and needs, particularly if you're immersed in cybersecurity or IT operations within the domain of Palo Alto Networks offerings What’s really cool about Fuel Use...

jforsythe_1-1721672468799.jpeg
jforsythe by • Community Team Member
  • 1475 Views
  • 0 replies
  • 1 Likes

After Upgrading our PA-820 to 11.0.2, we're seeing lots of data on dns-base application.

After Upgrading our PA-820 to 11.0.2, we're seeing lots of data on "dns-base" application. In a 24-hour period, I'm seeing 5PBs+ of data coming through, which is way over our limits for our internal network (two DNS servers at 1GB NIC each) and external network. Our ISP bandwidth is 500/500 Mbps. So it's going way over our MAX capacity. Howe...

CPU MP, DP and Memory Threshold

Hello all, i have manage a firewall appliance and iwant to make a preventive documentation, so i need to do the health check. i found several docs about the health check and the threshold (temperature, etc). But i didn't find a docs about CPU DP , MP and memory threshold like picture below. is there any docs from palo alto that state about this?...

DennyChanditya_1-1668530658176.png
DennyChanditya_0-1668530929615.png

Resolved! PA not be able to access internet

Dear All, I have a PA-1410 and the box do not have internet connectivity and below are the configuration, when i do trace route i see the next hop is showing 192.168.1.1 (mgmt interface) instead of 192.168.1.100 (ethernet1/1) and under monitor - taffic tab i do not see any traffic coming from trust to untrust, is it true that the...

piaakit_0-1721201899741.png
piaakit by • L1 Bithead
  • 5890 Views
  • 6 replies
  • 0 Likes

Globalprotect 6.3 - CIE and Embedded browser

According to the notes on globalprotect 6.3, CIE should now be compatible with the embedded browser, but I cannot get it to work. I see the requirements for the feature is PANOS 11.2 or later - we use Prisma, so not sure if Prisma is not compatible with it? Has anyone had any luck with Globalprotect + CIE + Embedded browser + Prisma? This is ...

change the name on a GP portal and gateway

Is is possible to rename an repurpose a global protect portal and gateway? I have one named student that is not being used but I want to repurpose the IP's and save myself from rebuilding a new one by just renaming and reusing student portal and gateway but the name is greyed out

jdprovine by • L4 Transporter
  • 14447 Views
  • 11 replies
  • 0 Likes

Password changed for user admin

Hi all,Yesterday we noticed a line in the Monitor tab that made concerns:But none of the administrator changed the password for user admin.When checked the logs if this user has logged in on Monitor tab, there was no login with this username admin in front of this password change.Could a commit or other system auto-commit make this log line? Tha...

changed_password_admin.png

Resolved! IPv6 on public interface

Dear all, I'm ttrying to get IPv6 up and running but so far without much success.My ISP assigend a /48 range to me and they are saying I need to use DHCP. AFAIK, DHCPv6 is not supported, but NDP is.Assume my IPv6 prefix isabcd:1234:5678::/48 So I enabled IPv6 on the public interface and set the interface IP toabcd:1234:5678::/48Enabled Interfac...

New Public IP Block-NAT

We have our PA connected to our ISP via /30's and they gave us a /28. We have a SilverPeak sdwan appliance behind the PA and are NAT'ing it's WAN interface from 10.5.1.2 to x.x.x.50. We can reach the SilverPeak on 443, but when we noticed it's not trying to establish underlay tunnels with the other SilverPeaks. I tried to manually configure a...

jasongorman_1-1721182677357.png

Dual ISP Failover with site to site VPNs

Hey everyone,Just started with Palo and was researching the optimal way of configuring ISP failover to include automatic failover of site to site tunnels.Is there a reason to use PBF over static route removal?Based on the reading date I was doing today, SRR appears less convoluted than PBF and seems the most similar to Cisco's SLA configuration ...

Evahi21 by • L0 Member
  • 4868 Views
  • 4 replies
  • 0 Likes

Ultra super mega slow reboot/update time?

Hey people, so I am currently upgrading one of our PA-820 Cluster from 10.1.6 to 11.1.2-h3. Is it is normal that 1 upgrade step takes around 20 minutes per Firewall? I feel like updating our Palos is taking sooooo long compared to our Fortis. In the same time where I do 1 update on 1 Firewall I could probably do 2 upgrade steps on both Forti Clu...

  • 24470 Posts
  • 125 Subscriptions
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks