This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

GZIP File - Google Translate

Hi,some users reported they are unable to use Google-Translate any more. I saw in the logs, Clients are trying to download GZIP files with the app google-translate-auto and google-translate-manual:I'm sure, the users were able to use Google-Translate in past. So the problem is since recently.

Hithead by • L4 Transporter
  • 9182 Views
  • 13 replies
  • 0 Likes

Resolved! Suspicious DNS Query list

Hello,Is there a list of all the DNS Querys that PA considers suspicious?I was considering changing the default action from alert to block for these signatures.Since there is potentially 1 million URLs that will automatically get blocked when adjusted, my client might want to go over the list before making the decision.Thanks!

Resolved! Virtual Wire deployment: vlan not crossing firewall

Greetings,Soon I need to get our firewall off from tap mode into a virtual wire deployment. We'll be placing it between our router and core network switch, with no local secondary production subnets to worry about so virtual wire seems to be the ticket. A problem we had with a previous attempt at this was that our phone traffic, which is voip a...

Netwerx by • L2 Linker
  • 8572 Views
  • 5 replies
  • 0 Likes

Needing all help possible to upgrade our lab from PA-500 to VM-100s

Good morning,I am John Hauser, a trainer for Fishnet Security, and I have been tasked with upgrading our lab environment from our old PA-500 hardware units to the VM-100 FWs. I have very little VM experience both on the initial setup of the VM side and then also what modifications will have to be made to labs to make them work. I have heard ma...

jhauser by • L1 Bithead
  • 5419 Views
  • 6 replies
  • 0 Likes

Resolved! DoS Protection Logs

If you have a DoS policy setup with both an aggregate and a classified DoS profile to protect a webserver and you see flood logs in the Threat Tab.. is it possible to tell whether or not the flood matched on the aggregate or the classifed DoS profile while splitting those into two separate DoS policies?

SDorsey by • L4 Transporter
  • 7749 Views
  • 1 replies
  • 0 Likes

Resolved! PAN VM series throughput

Is the throughput on the PAN VM series an arbitrary cap set by the PAN software? It seems that it certainly shouldn't be on the hardware side as one could do 10gb netorking, put it on SSD and throw as much ram/cpu at is as they desired. And I would think it's not a software 'limitation' since the PAN 3000s and up go well above 600mbps.

SDorsey by • L4 Transporter
  • 4063 Views
  • 2 replies
  • 0 Likes

Has anybody encountered a situation where a rule was configured for one application but matched other applications?

I have the following ruleI used 'any' as the service because we have web servers running on multiple ports and not just on the default.While it does match ssl and web-browsing traffic as expected, it also matches unexpected application traffic like the followingI don't understand why it would match oracle traffic. Any ideas?

palo_al by • L1 Bithead
  • 10969 Views
  • 15 replies
  • 0 Likes

mgmt appweb3[4591]: appweb3 error: : appweb3 ?

Hi,My PA-2050 recently management cpu always high to 70%, and 100% when commit. check the log as below,appweb3 error: : appweb3: Error: Ignoring unknown directive "Action" At line 121 in /etc/appweb3/appweb.pan.conf Make sure the required modules are loaded. Aug 13 06:03:32 mgmt appweb3[4324]: appweb3 error: : appweb3: Error: Can't find stag...

ArcherY by • L0 Member
  • 2628 Views
  • 1 replies
  • 0 Likes

SSL decryption feature

Hi All,I wish to ask do i have to have my own Certificate in order to use SSL decryption feature, in order to decryption my users SSL traffic ?OR i can just go and setup this feature and use it right away ?I use PA-VM-100, PAN OS 6.0.4

Difficulties creating a secondary VPN tunnel

I'm having trouble authenticating with a second VPN tunnel that I've created.I've created a new Portal and Gateway, almost identical to the previous ones. Obviously with it's own external IP, certificate that fits the given domain.Created a new Zone with a tunnel interface associated with it, which is also connected to a static route with the ne...

Disable SSLv3/TLSv1

Is it possible to disable SSLv3 and TLSv1 for Global Protect? Vulnerability scanners flag the interface of the PAN where Global Protect portal/gateway are hosted as it allows these deprecated versions.

SDorsey by • L4 Transporter
  • 3080 Views
  • 2 replies
  • 1 Likes

Resolved! Not able to Push the policy to a device

Hello ,Can any one please explain me the error i am getting while pushing the policies to a device of a device group.I want to push the policies only to the particular device ,member of device group.Thanks

tiwara by • L3 Networker
  • 3645 Views
  • 2 replies
  • 0 Likes

Resolved! How to Configure HA on PAN-OS 5.0.6

Hi,Any advise configuring HA on mentioned PAN-OS as documentation seems not very detailed..Have configured HA for control plane with ip addresses /30 , enabled HA, group 1 and Peer HA ip address; after commit am getting generic failure errorCheers

paul_w by • L2 Linker
  • 4656 Views
  • 3 replies
  • 0 Likes

Resolved! PA blocking returned traffic!!!

Hi,I've deployed PA-500 recently, and I'm experiencing an interesting situation.PA-500 is deployed in virtual-wire, and I'm filtering only my main ISP connection (ISP 1). The connection for ISP 2 goes directly to the router.We have a web server, which accepts requests from users through ISP2, and replies back but the router sends the replies thr...

Besfort by • L2 Linker
  • 4418 Views
  • 2 replies
  • 0 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks