General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How to exclude Windows Store from file blocking

Windows Store, at least specifically the Windows 8.1 download, seems to be categorized as web-browsing. I have a file blocking rule with web-browsing for file type PE set to continue-forward. Because of this, the Windows 8.1 upgrade doesn't download.

...

hheck by Not applicable
  • 1686 Views
  • 0 replies
  • 0 Likes

Resolved! Can't clear session from CLI

Running PANOS 6.0.1. I can't seem to clear a session from the CLI. Just tested on a PA-500 running 6.0.0-b42 and I have the same problem.

Anyone knows if this is a bug?

admin@PA-vm> show session all filter destination 212.x.x.x

-------------------------

...

bdeschut by L4 Transporter
  • 8158 Views
  • 8 replies
  • 0 Likes

Disable an IPSec Tunnel

I want to disable an IPSec VPN. I have currently blocked traffic both directions to the tunnel by using a Security Policies, but there should be a way to disable the tunnel in the IPSec configuration (or alternatively, disable the tunnel interface).

...

blandis by Not applicable
  • 5883 Views
  • 5 replies
  • 0 Likes

USER-ID Agentless change its browsing methode?

Hello

I was a little surprise when I configured a user-id with active directory monitoring

I defined a specific user with all the right needed on the active directory like

user is part of the Distributed COM Users, Server Operators and Event Log Reader

...

Gregoux by L4 Transporter
  • 1796 Views
  • 0 replies
  • 0 Likes

Decryption: sec_error_reused_issuer_and_serial

Hey all,

I am having problems with decryption. The PA decrypts https websites, but when I surf to that website a few hours later, I receive the following error in firefox:

I haven't tried yet in IE or Chrome. I have this problem for various websites, n

...

bdeschut by L4 Transporter
  • 5857 Views
  • 9 replies
  • 0 Likes

Threats alert

Hello Team,

I have configured the panorama threat alert for one of our firewall and its working fine. Alerts has been configured for High and Critical .

we are getting so many alert from one IP (10.32.100.238) , one of vulnerabilities management device

...

tiwara by L3 Networker
  • 2164 Views
  • 2 replies
  • 0 Likes

Create App for Bing Searching

Hello,

I recently got a request asking how often people at our institution search via Bing.  I could not find any existing application that does this, so I thought this would be a great exercise to create an app, however my creations is not getting tr

...

krhayes by L0 Member
  • 1677 Views
  • 0 replies
  • 0 Likes

EU - European Union

Is it possible to view the countries that are included in the "EU" object? When new countries are added to the EU, will this object be updated via dynamic updates or by upgrading?

Does anyone have experience with the accuracy of geo ip on palo alto?

Ki

...

bdeschut by L4 Transporter
  • 3140 Views
  • 2 replies
  • 0 Likes

external-list not correct

I have created an external block list like this:

If you follow the URL http://ipecho.net/plain, it will (only) show you your public IP address. I use this object to allow incoming connections to my dynamic (DHCP) external IP.

However, I have noticed th

...

bdeschut by L4 Transporter
  • 1567 Views
  • 0 replies
  • 0 Likes

oracle traffic-signatures

Hello

Is there any chance to use Data Patterns or Vulnerability signatures to find in oracle select command specific string?

Regards

Matthew

pownfz by L1 Bithead
  • 1320 Views
  • 0 replies
  • 0 Likes

Intermittent SSL decryption issues for some, not all.

My Palo Alto Firewall 2050 running 4.1.16.   I am having a lot of intermittent SSL decryption issues.  I'm not sure what to do with some of these.   An example is https://app.plangrid.com.    

I can this site when I have made this change and restart

...

EdwinD by L3 Networker
  • 3229 Views
  • 2 replies
  • 0 Likes

Resolved! ftp export log

Anyone know how to translate this show CLI command into the ftp export equivalent?

> show log traffic src in 10.0.0.0

> ftp export log traffic ?? (assuming query would work)

I would prefer not to export all logs only need a subset.

Thanks,

Monica

MLaden by Not applicable
  • 2383 Views
  • 2 replies
  • 0 Likes
  • 24197 Posts
  • 100 Subscriptions
Top Liked Authors
Labels