This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Securing inbound traffic

Hi all,Hopefully a fairly straight forward beginner question. If I'm wanting to securely set up a basic inbound rule to direct traffic to a web service in our DMZ (from a single external source address), is it best to specify the source address in the NAT or Security policy - or both? I'm trying to figure out the pro's and con's for both scena...

Resolved! VPN tunnel between ASA 5505 and PA 3020

I am trying to create a vpn tunnel betetween a ASA 5505 and PA 3020 and it keeps giving me IKEv2 error but I don't even have that enabled. What is the best way to do this type of VPN tunnel?

infotech by • L4 Transporter
  • 4915 Views
  • 8 replies
  • 0 Likes

What is Threat Prevention Throughput?

We're looking to pick up a new firewall, but we're not sure what Threat Prevention Throughput is and if it could be a potential network bottleneck. We're looking at the PA-500 and we have a 100 Mbps link now, but if we bump up our line speed, will the TPT be a problem later?So two questions:1. What is Threat Prevention Throughput?2. Can it be a ...

centre21 by • Not applicable
  • 3965 Views
  • 1 replies
  • 0 Likes

Resolved! Copying security profiles between PAN devices

Is there a way to copy security profiles and custom sigs from one PAN device to another? We have 3 PAN devices (one PA2020 and 2 PA500's) and don't want to recreate the profiles/sigs using the GUI on each device whenever we make a change.Perhaps this can be done at the command line or via config file xml parsing?Are we stuck having to pay $10k f...

rosboro by • L1 Bithead
  • 5203 Views
  • 3 replies
  • 0 Likes

Unorthodox use of vulnerability signatures, data filtering for URL blocking. Please advise.

Ok so I'd really like to skip the part about why my organization does this and get to the part about what should I be concerned about... Our PA is set up to block many many many URL's using URL Filtering, just as you'd expect any org to do, but there have also been many Data Filtering regex signatures created solely to block URLs as well. Often...

Cap by • L0 Member
  • 4208 Views
  • 4 replies
  • 0 Likes

Resolved! SYSTEM ALERT : high : Syslog connection established to server

I have mail notifications enabled for high and critical system logs. Because of this, I receive the following mail multiple times a day:SYSTEM ALERT : high : Syslog connection established to server['AF_INET.10.0.0.49:514.']domain: 1receive_time: 2013/11/07 14:01:28serial: 00xxxxxxxxxxseqno: 14814actionflags: 0x0type: SYSTEMsubtype: syslogconfig_...

Captive Portal with NTLM authentication redirect loop

Hello,I have successfully configured a captive portal with NTLM authentication for User-ID and users are successfully authenticating using NTLM, but right after that they are stuck in a redirect loop on the following page:User Authentication in ProcessThe original web page you requested will load when the authentication process completes. Click ...

BLazarov by • L1 Bithead
  • 3191 Views
  • 2 replies
  • 0 Likes

Resolved! VPN-SSL through Palo Alto

Hi, im having problems connecting with VPN-SSL clients (Global Protect and SonicWALL VPN Client). We have a firewall Palo Alto to go to internet and i use these VPN clients for connecting to several branches but i dont know why my Palo Alto (which VPNs go through) is having a strange behaviour. I dont see any connection in the MONITOR TRAFFIC ab...

SOC_CSG by • L4 Transporter
  • 4496 Views
  • 4 replies
  • 0 Likes

Resolved! QOS on Interface with 20 Mb

Hello,I want to restrict bandwidth on interface e1/2 with 20 Mb I have created QOS Profile with wireless and applied that on interface e1/2.Enclosed are the snapshots for your reference. Please advise that it who to test this profile.Thank you.

Suspicious DNS Query Action

Hello PAN Community,I would just like to know if its possible to edit or change the default action for a specific suspicious DNS query?We have a situation here where what we wanted to happen is to drop all the packets for suspicious DNS query instead of resetting both connection.Thank you in advance.Regards,Hartkently

SSL VPN - Basic Questions

What basic steps have to be complete to allow a remote user to enter an ip address in their browser and get the ssl vpn authentication screen? We currently get an eventual timeout when we try to connect from a browser. We followed the basic GlobalProtect setup steps, but, just wondering if there is something 'dumb' that we are missing.Thanks!

shank by • Not applicable
  • 8511 Views
  • 11 replies
  • 0 Likes

Resolved! Making server available with NAT doesn't work

Today I tried to configure our PA500 firewall to make a server from our DMZ zone available for Office 365. But first I will explain our network topology.In our company we have 2 internet lines, one for internet and the other one as backup. After this backup line we have several public IP adresses, so I want to use these IP adressen for publishin...

ZEBIT by • L3 Networker
  • 3160 Views
  • 2 replies
  • 0 Likes

User-ID sometimes missing ntlmdomain\ on the firewall

Hi,I've recently seen this a couple of times on completely separate firewalls / AD infrastructures (a 2050 cluster and a 3020 cluster, both running 5.0.8). User ID is setup and working fine along with LDAP group mappingHowever on the odd occasion users report applications or URL categories blocked that should be allowed. It often "goes away" aga...

Dpeters1 by • L2 Linker
  • 7207 Views
  • 6 replies
  • 0 Likes

Wildfire - is the full subscription worth it?

Apologies for the somewhat blunt title but it really is as simple as that I've been using the bundled WildFire service for some time and did begin to wonder if it was working until it pinged on a couple of zero day Zeus trojans - seems our folks are just too well behaved by and large.Anyway, I'm on the 30 day trial license and I wanted peoples v...

  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks