General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

V-Wire Mode with trunk

Hey Guys, i am about to deploy PaloAlto 5020 in a v-wire mode with trunk on them, does any one has any known issues that i may encounterhere is the topologyCurrent: switch ====(trunk)===== cisco firewallnew: switch======(trunk)=====PaloAlto (vwire)=====(trunk)====Cisco firewall.Any help would be appreciated.Regards,~Harry

Harshit by L3 Networker
  • 2528 Views
  • 2 replies
  • 0 Likes

VPN Global Protect

Hello everbodyConfigured on a global protect our customers and all this working well, just a little problem that we try,can not send icmp packets via hostname only via IP Address, on your local network can ping both via hostname as IP Address. I'm pointing to in the policy area of internal, where is my DNS servers and the reverse of it is worki...

Need to migrate checkpoint firewall config files to palo alto xml file.

Hi All,Kindly let me know the solution for the same....Stopped the services in checkpoint using cpstop command using CLI and and targeted the folder called upgrade_tools directoryRun the command called upgrade_export and named the new export file and output came with file called .tgz successfullyUnzipped the file called Upgrade31.export.tgz and ...

Krish by Not applicable
  • 5014 Views
  • 4 replies
  • 0 Likes

ike policy

What part of the configuration on the PA matching what is called the ike policy on the Cisco?

infotech by L4 Transporter
  • 10311 Views
  • 22 replies
  • 0 Likes

Custom Vulnerability Object to detect Failed WordPress Logins

I'm trying to stem the flood of wordpress brute force attacks coming into our network (we host a lot of WP sites). Detecting WP logins is relatively easy, by setting up a signature that looks for the regex wp\-login\.php in the http-req-uri-path context with the http-method = POST qualifier. I can now see all of the wp-login requests coming into...

Resolved! security-policy-match from the API

I'm trying to write a tool that will test security policy from a web portal. I cannot seem to get the command working properly, though. The URL I'm using on the firewall is this:https://host.local/api/?key=keyhere&type=op&cmd=<test><security-policy-match><source>192.168.2.1</source><destination>192.168.3.1&l...

txadmin by L0 Member
  • 4215 Views
  • 3 replies
  • 0 Likes

Resolved! Error when trying to restart management-server

My PA 2020 box has been a bit slow of late, and it also has failed on 2 commits so I thought I would drop onto CLI and do a debug software restart management-serveras this would usually pick things up when I have had the problem in the past.But when I do this command I get the following Process 'mgmtsrvr' executing RESTARTJul 31 12:06:35 Error: ...

JRussell by L3 Networker
  • 11995 Views
  • 4 replies
  • 0 Likes

Antivirus profile question, wildfire action?

Hello,Have a question about how to configure an antivirus profile. When try to define Decoders and actions can see a tab for "Wildfire Action" and that's where my confusion appear. what's the purpose of this tab? that implies that if I select block, all the files were be blocked? ? As far as I know wildfire is an "on the cloud" scanning system b...

Is it possible to enable url redirection in PaloAlto?

Hi All,Scenario: We have the web server for example.com in trust zone, Any person can access it by anywhere due to destination NAT in firewall with public IP for example.com.Problem : As we don't have internal DNS server which resolves the example.com, due to this all the request from LAN to example.com is going to internet(public DNS) and comi...

Gururaj by L4 Transporter
  • 11613 Views
  • 5 replies
  • 0 Likes

Wildfire -> DNS Signatures -> PAN-DB

Does anyone know the flow that the PANW Firewall goes through to update the DNS Signature data? Does Wildfire detection feed the DNS Signatures and then PAN-DB categorizes the URL as Malware?Thanks,Jeff

jwolach by L4 Transporter
  • 3265 Views
  • 3 replies
  • 0 Likes
  • 24381 Posts
  • 123 Subscriptions
Top Solution Authors
Top Liked Authors
Labels