General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Problem setting up a U-Turn NAT rule

Hi all,While trying to setup LSVPN on our HQ Palo Alto device, we ran into a U-Turn NAT issue. Let me first explain the setup:We setup an OCSP responder using a loopback Interface on the PA firewall. The private IP address of that loopback interface is 10.99.99.1/32. The private IP is not being used outside the firewall. Instead, all "clients" i...

oschuler by L4 Transporter
  • 8355 Views
  • 7 replies
  • 0 Likes

Decryption rule blocking traffic silently

I am running PanOS 6.0.3. I have a decryption rule that perfectly works most of the time. However I realized that in some specific situation it silently blocks the traffic. As I am quite new on Palo Alto, I do not know if I am misunderstanding something or if I found a bug.Here follows the exact description:1) Global rule decryption all traffic ...

PPPoE in A/P configuration

Hi,Just checking this will work:users---[switch]---[a/p ha pa500's]---[switch]---ntuSo the service provider requires a PPPoE client to use the link. The SP only allows one port on the NTU to be used and only supports a single PPPoE session.Can the PA500's in A/P HA happily maintain this PPPoE session?Thanks.Richard

IKE 500

Here is some traffic being sent from my DMZ to the internet and I am trying to determine whats happening. How would the community read this informationSession 192980 c2s flow: source: 172.17.1.5 [DR-DMZ] dst: 199.169.208.244 proto: 17 sport: 500 ...

infotech by L4 Transporter
  • 17689 Views
  • 32 replies
  • 0 Likes

Resolved! Custom URL Block Page

Hello Techies,I am in process to implement custom URL block page in addition to default block page. In need to add below additional things in my custom URL block page1. my company logo : Looking assistance to achieve2. whenever there is block URL message it should show mail to list -- Achieved please find full HTML code as below3. But when we c...

Resolved! Issue Setting Up a Policy for Plex

Ok so we are testing a way to transcode some videos to distribute to remote users and Plex is working well internally. I am now trying to set this up so that we can use externally as well. Here is what I have done.1) Created the Object Address for the Plex Server2) Created a Security Policy to allow inbound access to the Application "plex"3)...

URL Filtering Log show Action block-url

my palo alto I see url-filtering log---in columns action show block-url---in columns rule not showand I don't add url-filtering profile to all security rulewhy url-filtering show action block-urlhelp me pls.PA5020 PanOS5.0.12PAN-DB

BaNk by L1 Bithead
  • 10033 Views
  • 3 replies
  • 0 Likes

Default threat ID correlation for action

Hi all,I was searching for a while and could not find the answer to this question.By default, does a Palo Alto block every instance a threat ID (that is enabled) is seen or does it wait until 1 threat ID hits 5 times in 1 minute (for example).I would think it would be the former, but was searching for confirmation.Thanks

Xbox Live with dynamic public IP

I know that this topic has been discussed before, but I cannot seem to find an exact scenario match since I am dealing with a dynamic public IP address.Interfacesethernet1/1Primary internal networkDefault virtual router172.16.50.1/24Zone: Internalethernet1/2Public internet connection with dynamic IP addressDefault virtual routerZone: Externaleth...

swoods79 by L1 Bithead
  • 7631 Views
  • 7 replies
  • 0 Likes

forward connectivity

Hi friends,How to forward connectivity when our VPN connectivity down or leasedline down.RegardsSatish

Satish by L4 Transporter
  • 1935 Views
  • 1 replies
  • 0 Likes

Resolved! CryptoWall??

I did a search for this... came up w/nada. Has there been any convo about CryptoWall? Has PA addressed it?thanks//moe

Resolved! How do I find out every place an object is used?

Does anyone know a good way to find out everywhere an object is used?What security and NAT rules is it in?What address groups is it in?What are the rules the address groups the object is in used?It would be great if there were an easy way to this.

Demast by L2 Linker
  • 13910 Views
  • 8 replies
  • 1 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
Labels