General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 350 Views
  • 0 replies
  • 0 Likes

Custom Report

Hi all

In user activity report there  Browsing Summary by Website and i need to use it in custom report instead of Full URL description as the report

Regards

Resolved! force refreshing of user-group-mapping

Hello,

to get some information of a user-group i use the command: show user group name "abc"  and i got all members of the group

and then : debug user-id refresh group-mapping group-mapping-name "abc"  and i got "server-error abc is invalid group-mappi

...

kdd by L4 Transporter
  • 4011 Views
  • 4 replies
  • 0 Likes

Custom APP-ID

Hi,

I'm trying to create a custom APP-ID for nearmaps.com. However, cannot get the monitoring to identify the traffic. Following is how I created the APP-ID,

captured the header information from HTTPFox on Firefox. Refer attached screenshot

Im not sure

...

Shayan by L1 Bithead
  • 2707 Views
  • 1 replies
  • 0 Likes

Resolved! Log recovery after Panorama downtime

If the Virtual Panorama goes down for a several hours for maintenance and then comes back online will the Panorama reliably request and receive the updates from the individual firewalls logs for the time it was down so that the logs will be complete?

...

Monitor session end reason

Hello,

How to check what was the reason behind session end? I mean it could be RST, FIN or timeout from firewall.

Regards,

ifpilm

ifpilm by L1 Bithead
  • 2585 Views
  • 2 replies
  • 0 Likes

Tunnel Monitor Configuration question

Operation CommitResult Failed
DetailsIPSec tunnel #NAME enabled tunnel monitoring while binding to tunnel interface tunnel which has no IP address assigned to it yet.

I receive this error when configuring a tunnel monitor to the IPSec tunnel. I'm guess

...

rking13 by L1 Bithead
  • 4246 Views
  • 4 replies
  • 0 Likes

IPSEC Tunnels and HA Failover

Hello,

In a scenario with two palo alto firewalls where the active firewall fails over to the passive firewall, if there are IPSEC tunnels established are they suppose to automatically come up on the second firewall when the failover occurs or do we

...

MarkTan by L2 Linker
  • 4546 Views
  • 3 replies
  • 0 Likes

dynamic address group

Hi,

when adding an dynamic address gorup with a lot of criteria(each or criterias not and)

is there a way to learn which criteria related to which ip address.

when using command " show object dynamic-address-group all" I cannot understand which ip is re

...

panos by L6 Presenter
  • 2233 Views
  • 2 replies
  • 0 Likes

VPN to dynamic (ddns) destination

I have a VPN setup to a destination that using ddns to keep the hostname across IP changes. This works fine as long as the remote end is initiating the tunnel, but it seems the PA cannot be configured to be able to also *initiate* the tunnel:

When the

...

ctr_ts by L1 Bithead
  • 3213 Views
  • 2 replies
  • 0 Likes

SFTP Timeout

We are experiencing a timeout across SFTP; while SSH seems to be set to timeout at 120 hours, SFTP transfers are timing out at the 1 hour marker.

Is this an expected result? And if so, can we adjust the timeout for SFTP specifically?

Thank you.

CalvinR by Not applicable
  • 2900 Views
  • 1 replies
  • 0 Likes

Resolved! Software Upgrade

Hi Everyone - I have a 4050 HA pair (4.0.12), 2050 HA pair (5.0.1) and several 500's (5.0.3).  I am looking to upgrade the software on all firewalls but have had issues (typically high CPU and memory issues) with all these versions of code.  Can you

...

ROUTING INTER VSYS

Hello ,

I need to route users between more than 2 VSYS. do you know if it's possible to route packet between more than 2 VSYS. PACKET IN-> VSYS1 -> VSYS2->VSYS3-> out. What is the limitation for the routing inter VSYS

thks for your help!

ALex

alle by L3 Networker
  • 3626 Views
  • 3 replies
  • 0 Likes

User-ID Agent not reconnecting after network outage?

We had a strange issue today.

We had a network outage which basically meant that all our DCs that run the User-ID agent were still running, and our PAN was still running, but there was no LAN between the DCs and the management interface on the PAN.

The

...

Resolved! Proxy-Arp behavior and NAT's

Hi All,

This problem is a little confusing to explain but I will do my best to lay this out.  Keep in mind I have changed the IP addresses to keep examples simple.

I have a Palo Alto 2020 with a basic configuration.  One internet connection and One LAN

...

  • 23830 Posts
  • 112 Subscriptions
Top Liked Authors
Labels