This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! SSL Offloading 'Forward Trust' grayed out

Hi,I have created a certificate from my local CA and also have imported the CSR from PA to the local CA, created the identity certificate, all is well, but it seems I am not able to "Check Box" the "Forward Trust Certificate" on the PA.This it seems is a necessary step while configuring SSL offloading.Any clues on what needs to be done ....Plea...

rz185016 by • Not applicable
  • 7546 Views
  • 5 replies
  • 0 Likes

Resolved! Administrator Authentication with ldap

Trying to create role based user account for monitoring the firewall. I tried to use ldap authentication. However it seems there is some issue with using ldapI am facing this error after trying to authentication with correct credentials and below are the logsAlthough it shows authenticated, but still the invalid username and / or password on the...

Westcon2 by • L3 Networker
  • 9620 Views
  • 15 replies
  • 0 Likes

unable to create final .xml file using -Migration tool

Trying to migrate the configuration of fortinet and juniper, after loading configuration and when going to create final .xml file there were some errors. like mask and service port. After changing all object with correct port number and subnet masks still unable to create final .xml file and also not showing the nat policies in migration tool.

Resolved! About custom report with no matched data

Hi guys,My customer configured the Custom Report with enabled schedule so PAN automatically generated Custom Report and sending a Report to Customer Email address. It's a good work for us.Customer don't want the report that no data contained caused no matched data but PAN has sent a report that not to contained any matched data to customer email...

Resolved! Is there a way to limit the number of logged in administrators?

This came up as a question during a class and to my knowledge there is not a way to limit the number of logged in administrators, however the student asking presented a reasonable case; In a service provider or large enterprise environment during a network event multiple administrators log into the firewall and begin looking at filtered logs. ...

gelgin by • L2 Linker
  • 4128 Views
  • 3 replies
  • 0 Likes

Resolved! Tips on configuring a secondary internet connection using Verizon Cradlepoint 4G router (ARC750B)

We are a small shop and have a single PA-200 with one internet connection. We would like to add a backup internet connection using a Cradlepoint 4G router. What is the best way to configure this and how do we control the fail over or manually changing to the 4G connection if the primary is down? The Cradlepoint seems to have built-in failover ca...

Resolved! Configuration of Palo Alto's in a NIST SP 800-70 Environment (mostly IPv6 blocking related)

Recently as part of our PA-3200 deployment been going through the joys of implementing NIST SP 800-70 configuration controls which in this case means the DoD STIG's (specifically Firewall and IDS STIG, v8 r17) and running into a problem which I noticed during my demo but didn't think much about it until now is a distinct lack of vulnerability ru...

PeterT by • L2 Linker
  • 10096 Views
  • 9 replies
  • 0 Likes

Active tunnel

I have created site to site vpn tunnels from a palo alto 3020 to ASA 5505 firewalls. The show green and active through the CLI and the web console. But when I try to ping a server on the other side of the tunnel I get no reply, is the tunnel up? Is it really passing traffic?

infotech by • L4 Transporter
  • 13849 Views
  • 28 replies
  • 0 Likes

NFS monitor interval on panorama

Hello,Anyone know the monitor interval of nfs on panorama? In my case, there is a cluster which include 2 nfs server, everytime when the nfs cluster faliover were happened, the panorama will restart itself to change logdb, I found that all the time of nfs cluster failver should take 50 to 90sec, it would be taken too long time to complete nfs fa...

Resolved! block interne

Hi friends,How to block internet on our DB servers.RegardsSatish

Satish by • L4 Transporter
  • 3965 Views
  • 4 replies
  • 0 Likes

Are DMZs still necessary?

We are running a PA-500. Given it's abilities I am wondering if a DMZ is absolutely necessary. Note: I realize this is a wide open question, what servers are we using, what operating system, etc. I am curious in more of a "general" sense.There are obvious situations where a DMZ is a no brainer, hosting a site with SQL, money transactions, et...

BobW by • L4 Transporter
  • 8007 Views
  • 5 replies
  • 0 Likes

Resolved! Problem setting up a U-Turn NAT rule

Hi all,While trying to setup LSVPN on our HQ Palo Alto device, we ran into a U-Turn NAT issue. Let me first explain the setup:We setup an OCSP responder using a loopback Interface on the PA firewall. The private IP address of that loopback interface is 10.99.99.1/32. The private IP is not being used outside the firewall. Instead, all "clients" i...

oschuler by • L4 Transporter
  • 8436 Views
  • 7 replies
  • 0 Likes
  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks