This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Upgrading PanOS from v5 to v6

Hi,We're currently running codebase 5.0.11, and would like to go to 6.0.3.Here are a few questions I have.1) This is a fairly new install. When we migrated our config from our ASA to the PAN, the only reason I didn't go to the 6.0 codebase is because some of our objects didn't move over properly. For instance, Service Groups and Address Group...

wocomike by • L1 Bithead
  • 3360 Views
  • 2 replies
  • 0 Likes

Resolved! policy rules hit

Hello folks,Currently if I need to find out if a particular rule is being hit or not I use the following filter under monitor tab.( rule eq 'nameOfRule' )Obviously it gives lot of good information with a reasonable detail. I was wondering if there is another way of finding out how many hits a particular rule has hit so far without going into to...

Resolved! Adobe Flash Player installation fails

Hello, When I try to install Adobe Flash Player, the process is interrupted with the following error message: "Unable to load metafile". What Application-ID do I need to enable in order for it to work? Web-browsing is already enabled, together with flash and flashget. Thank you in advance. Best regards,Marcin

shilpaal by • L1 Bithead
  • 2719 Views
  • 1 replies
  • 0 Likes

URL re-write

Hi!Is there anyone who can tell us if there will or will not be url re-write in the future, and if there is a possibility to define approximate time/date?Greets.

Object address with Security rule stops VM from allocating IP

I have a Esxi Server with a particular VM machine on it. If I reboot that machine it does not give it the configured IP address that I have set it for. If I try go in and manually tell it to use the IP address it is assigned it tells me that this IP address is already in use.If I go and change the Object IP address in Palo Alto Firewall then it ...

JRussell by • L3 Networker
  • 3236 Views
  • 4 replies
  • 0 Likes

Resolved! PA Ipsec 2/3 phase 2 coming up only

Hi there,I have a unique linux firewall box (that connects back to PA via Ipsec tunnels) on one of my sites. It is unique in the fact it requires 5 NIC's for the networks there. It only uses 3 phase 2 Ipsec tunnels which is the same on all my sites, but I have noticed some issues.Namely that some of the time only 2 out of 3 tunnels come up. Some...

JRussell by • L3 Networker
  • 5732 Views
  • 5 replies
  • 0 Likes

Resolved! Vwire on MPLS link ?

Would vwire on an MPLS link be supported ?I guess that traffic will be passed, but will the firewall be able to see/inspect the real data ( and thus strip of the mpls headers ?)Bart.

bjocque by • L1 Bithead
  • 4793 Views
  • 3 replies
  • 0 Likes

Multiple Panorama Problems

I have multiple issues with Panorama that may, or may not, be connected:-Getting 'No Update Information Available' when looking for the latest software packagesWhen it sometimes does work, when trying to download latest (6.0.1) image we get an authentication\integrity error on the package.Upgraded Panorama to v6.0.0 (from 5.0.11) to see if this ...

apackard by • L4 Transporter
  • 4146 Views
  • 4 replies
  • 0 Likes

Updates - everything seems to resolve to San Jose?

I thought that updates.paloaltonetworks.com uses a CDN so if you're in Europe you use a local server for updates.From the UK it resolves to an IP in San Jose and this seems to be the case on any online lookup tool and traceroutes from various sources all go to San Jose.I'm asking because of the issues I'm having with downloading WildFire updates...

VPN Performance Problem

Just wanted to all let you know about a VPN performance issue we have with one of our customers.The customers is running an IPSec Site2Site Tunnel to a third party company (Cisco Device). They have a PA-5020 Cluster (5.0.12) and the Tunnel link is providing 1Gb/s throughput. Now all was working fine until the customer added a source NAT for the ...

gafrol by • L4 Transporter
  • 4214 Views
  • 6 replies
  • 0 Likes

PA-FW Update getting Fail

Dear Experts,We have PA-FW getting fail during the Update. Firewall has three zones: Inside,Outside and DMZ.Management IP address of PA-FW is passing through Inside zone of the PA-FW. Management interface of the FW has the gateway on the core switch and core-switch has the default gateway of the Inside zone interface.In the traffic logs.. The co...

Custom App for local Proxy

Hi community.Is there an option to setup a custom app for a locally installed proxy. The idea is to distinguish if the local proxy or a proxy somewhere is used. App override is not a valid solution because of lose all the Content-ID features.Best regards, Markus

  • 24448 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks