This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

AD Authentication Problem with Secondary Firewall

HI friends..I am having two Palo Alto Network ( PAN-PA-3020 ) firewall installed in HA mode (Active-Passive) . My problem is when ever my Primary FW goes down or change to passive and Secondary become Active, My Active directory authentication becomes fails, however all other things works fine. Please suggest.ThanksRegardsSatish

Satish by • L4 Transporter
  • 7793 Views
  • 14 replies
  • 0 Likes

Problems with SSL-Decryption

Hi,since a few days, we have more and more websites, which we are unable to login. After further investigation i'm sure there's something wrong with SSL-decryption, if I exclude the IP from encryption the sites work. But formerly the problem doesn't exist and nothing changed. Could it be a problem with different TLS versions in the IE?

ITSama by • L2 Linker
  • 5383 Views
  • 5 replies
  • 0 Likes

captive portal issue

Hi All,We configured captive portal-redirect with local db when unknown users(who are not in AD,belongs to local db) redirected and web form is authenticated.But the problem is they can't browse internet. Browser shows" page not loaded" to those users..Can you tell me possible cause?One more problem..Users who are logged in via LDAP are disconne...

Javith by • L3 Networker
  • 3417 Views
  • 3 replies
  • 0 Likes

Resolved! Domain Administrator no Authentication??

Has anybody an idea, why the Active-Directory authentication works from every location in our company with every domain-user, but if I use the Domain-Administrator-Account I always forced to use the login credentials with Captive-Portal??

ITSama by • L2 Linker
  • 6913 Views
  • 6 replies
  • 0 Likes

Resolved! Trusting QOS markings

will the PAN-OS automatically trust markings applied by other systems on the network or do I need to make a policy in addition to the policy on the rest of the network?

kkeeton by • L2 Linker
  • 12526 Views
  • 10 replies
  • 0 Likes

email notification

Is it possible to set up a notification by email to let you know when one and only one vpn tunnel goes down? I also want to be able to turn it off once I am done troubleshooting

infotech by • L4 Transporter
  • 5473 Views
  • 8 replies
  • 0 Likes

Allow Spotify authentication, but not streaming

It there a way to allow Spotify to authenticate, but disallow streaming (both from web and apps?)As-is there are only one AppID for Spotify, and this blocks everything.Users having the app in offline mode has go go online every 30 day to regain new 30 days of offline use, and i think an authetication is enough.Anyone else having problems with this?

Start VPN from C# or script

Hello!Is there a way to instruct the Windows GlobalProtect Agent 2.0.3-5 (that ist completely configured for the current Windows User) to Start the VPN from C# (or from within a script)?Thanks for any Ideas, Jürgen.

Firewall he is covering under some vulnerability

Hi friends,Need suggestion Actually when auditor running Vulnerability scaner tool then on Firewall he is covering under some vulnerability> Upgrade to the latest version of OpenSSL> Use a strong key> Disable SSL support for weak ciphersSo for the current version of Firewall customer has 6.0 version software then is this version is fr...

Satish by • L4 Transporter
  • 2808 Views
  • 3 replies
  • 0 Likes

DSCP marking over ipsec VPN

Hello,I inherited a network with 4 sites connected together via 3 PA-500's and a PA-2020. We have implemented Lync for VOIP and I'm having issues getting packets to retain their tags across the VPN (internal to the tunnel is all I want) I can't seem to find any documentation talking about DSCP/COS/IP Precedence tags anywhere in the documentation...

traty by • Not applicable
  • 7810 Views
  • 4 replies
  • 0 Likes

Filtering Systemlog

I'd like to filter the log in order to get lines containing e.g. "BSS".It works when filtering the description column : ( description contains 'IKE protocol IPSec SA delete message received from peer. SPI:0xAB229BB0.' )It works when filtering the object column: ( object eq P1_012_BSS_EISEN )It does not work when filtering with "CONTAINS" ( obj...

rkra by • L2 Linker
  • 3352 Views
  • 2 replies
  • 0 Likes

Packet capture filters

Hello.Does anyone else have problems with defining filters for packet capture in WebUI?If I understand correctly (there is no info about this in official documentation) all values in the same filter are logically connected with 'AND' operator. And logical operation between different filters is 'OR'.So if I want to monitor all traffic between 2 h...

santonic by • L6 Presenter
  • 7794 Views
  • 6 replies
  • 0 Likes

Can not access management by WebUI

I can not access palo alto by web management https://xxx.xxx.xxx.xxxWhen I login,it redirect to page login again.I can access ssh and I see patition root is use 100%.

BaNk by • L1 Bithead
  • 4319 Views
  • 2 replies
  • 0 Likes

ssl decryption certificate

HI FRIENDS,Now days i am facing a challenge ssl decryption certificate. i have a create a ssl decryption policy for block few App -ID after SSL decryption we got certificate error client side any suggestion???RegardsSatish

Satish by • L4 Transporter
  • 4814 Views
  • 7 replies
  • 0 Likes

Resolved! Panorama template push on production devices

I have an environment where there are Palo Alto firewalls already deployed and in production (mix of PA-200's & PA-500's), I am building the templates but I want to make sure that when I push them out the templates won't wipe out the management interface settings or settings that are left blank in the template on Panorama. I have looked thro...

ericv by • Not applicable
  • 22419 Views
  • 4 replies
  • 1 Likes
  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks