This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Captive portal bypass

Anyone familiar with a way to bypass captive portal for non-browser-based applications? Doing some testing with an eval unit from Palo alto and have configured agentless DC monitoring and using captive portal auth for a fallback. If a user hasn't already authenticated to captive portal it is blocking apps that go over port 80/443 such as ms-upda...

ccscott by • L2 Linker
  • 10396 Views
  • 7 replies
  • 0 Likes

PAN-DB URL Filtering Updates

Hi,We have a couple of PA devices configured in HA mode. I just want to ask if it is normal that only the active firewall gets the URL filtering incremental updates. eg. FW-01 (active firewall) gets updated to version 2005.12.811 and FW-02 gets stuck to version 2005.12.000? Thanks,Nelson

NelsonA by • L0 Member
  • 5673 Views
  • 4 replies
  • 0 Likes

Problem with NAT rules

HelloTask is simple, give access to 3 IP from Internet to camera on non-standart ports. Ports and local IP are: 192.168.220.251:554 -> x.x.x.x:554 192.168.220.251:80 -> x.x.x.x:8881 192.168.220.251:8554-8557 -> x.x.x.x:8554-8557where x.x.x.x is one of IP belongings for my PA and is used for NAT from this zone to untrust.I created secur...

_slv_ by • L4 Transporter
  • 6232 Views
  • 1 replies
  • 0 Likes

UIA - Not domain user Identification Problem

Hello,I have a problem/doubt with the user-id and in particular with the identification of the local machine users.Internet access is only allowed for domain users and if the users enter in their computer with the domain account They don't have problems, but some times when the users enter with a local machine account the UIA installed in a ser...

Resolved! FW can not update anti-virus signature.

HiFW can no update anti-virus signature.Please look at the following logs.admin@PA-3050> request anti-virus upgrade install file panup-all-antivirus-1278-1748.tgz Content install job enqueued with jobid 44admin@PA-3050> show jobs processed Enqueued ID Type Status Result Completed -------------------------...

Resolved! For OSPF or EIGRP App-id in vwire deployment between L3 devices with dynamic routing.

Hello,There is a device with vwire between L3 devices using dynamic routing protocol(ospf or eigrp).I checked ospf or eigrp app-id in traffic log but there are only two ~ three logs for 2 hours.I think they are few logs.The communication between L3 devices has no problem.I just wonder it.In addition, I can not connect a device right now. I can d...

HA binding "both option" not working in NAT policy

Dear all,I've configured my Palo Alto Cluster in a L3 Active / Active cluster setup.While I was trying to implement a NAT policy (Source Address Translation), it turns out that the only options that are working are: "0" and "1", as a reference to the member of the active/active cluster which should take care of the Address Translation.It turns o...

wimjuste by • L1 Bithead
  • 8523 Views
  • 3 replies
  • 1 Likes

PANDB is not categorising correctly

HiHas anyone experienced this problem and found a solution for it ?Some examples www.testbase.co.uk -- Pandb - religion -- clearly wrong Brightcloud - Reference and Research Training and Tools -- correct www. michaelwoodside.co.uk pandb -unknown clearly wrong Brightcloud -- Personal sites and Blog ...

Network Monitor does not show specific data.

Hi.allI Have a question about Network Monitor of App Scope.filter "Source / Top 10 User / Last 30 Days"When filtering application is normal.When I select source of data is not seen among the eight days. (Capture Attached)Also I was check the Network Monitor last night then April 24 ~ May 1 of data not visible. Today check the Network Monitor Ap...

wooki by • L1 Bithead
  • 10267 Views
  • 7 replies
  • 0 Likes

Entries in My System Logs

I am getting this a lot. Anyone know what it means:EBL(Dyn Block Test) Refresh Aborted. Entry not refrenced by a ruleAnd the word is misspelled in the logs as well.

User/Group mapping OpenLDAP

Hello. My situation is: - GlobalProtect VPN configurated -> user identification via GP then. - LDAP profile configurated -> authentication works well - Authentication profile configurated. - User Identification, Group Mapping configuration: - Group Objects: - Object Class: posixGroup - Group Name: cn - Group Mem...

GlobalProtect client

HiAny one familiar with Cisco's ipsec vpn-groups ? just wanted to find out how the concept can be implemented with PA.RegardsDarlington

dmoyo by • L0 Member
  • 2402 Views
  • 1 replies
  • 0 Likes

Detection of duplicate ip?

Hello,Got a call from a client said their network is slow and intermittent Internet access. Found out someone in the office installed a network based webcam that used the same ip address as the firewall interface on that client net. I checked the firewall log and did not find any alert about duplicate ip detected. It turns out PanOS does not ...

Traffic Question

I have a customer who is unable to access a site over port_873. When searching the traffic I see that the Source IP to Destination IP are being allowed over port 873 but the application is showing as incomplete. Now, I understand that this indicates that the handshake is not being completed most likely due to the distant end, but there are still...

syslog format 2 servers

Hi,How can we configure to send syslog with CEF format and log format to seperate syslog serversDoes paloalto support that ?There is only one custom log on the server profile.Regards

PanIst by • L3 Networker
  • 2573 Views
  • 2 replies
  • 0 Likes
  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks