This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

PA-200

I am working on a PA-200 firewall and get an error within the traffic log. It reports in the application column that it is 'incomplete'. I can't find anything on this error. It appears it would be in the rule settings but not sure.I am using version 4.1.6Any assistance would be appreciated.

Block Gaggle App

Hi I need help blocking gaggle from our network. This is an App where users enter anonymous comments or pics and users in the area can view them. I was able to do Yik Yak since there was an Application in Palo Alto.

Resolved! Threat-version: 434-2198 and new signatures - problem

HelloWe can read in email "Palo Alto Networks Content Updated" that version 435 give us:New Vulnerability Signatures (4)SeverityIDAttack NameCVE IDVendor IDDefault ActionMinimum PAN-OS Versionlow36421Phishing Webpage Detectionalert4.0.0critical36442Malicious Flash file Detectionalert4.0.0critical36443Apache Structs ClassLoader Manipulation Secur...

_slv_ by • L4 Transporter
  • 5122 Views
  • 8 replies
  • 0 Likes

Resolved! Destination NAT - Entire Subnet

I have a PA-500 running PANOS v4.1.10. Is it possible to configure a single destination NAT rule that translates the address for any given /24 subnet on to the equivalent address in the destination /24 address; e.g. Original Packet Dest: 192.168.50.X -> Translated Packet Dest 172.16.29.X

kroche by • Not applicable
  • 6396 Views
  • 4 replies
  • 0 Likes

Resolved! problem with management plane

Hi,I am not able to access the management website. The website does not load. When I try to restart the management plane from ssh with a command "debug software restart management-server" I get this error: 2014-05-08 12:08:11.503 +0200 Error: pan_read_full(comm_utils.c:104): srvr: fatal recv error. sock=3 err=Connection reset by peer (131)admin@...

UMWL by • L0 Member
  • 5681 Views
  • 1 replies
  • 0 Likes

Amazon AWS VPN (VPC)

Hi all,We are working on moving some of our servers to AWS and they require 2 VPN redundant tunnels to be configured with our network. Amazon suggested to terminate the VPN on Internet edge router because the VPN redundancy requires BGP. Between the Internet edge router and the Palo Alto firewall, it is unprotected (but it will be on our physica...

Resolved! Globalprotect terminating in its own vsys?

I'm trying to setup GlobalProtect to terminate in its own VSYS (for administrative purposes), i.e the Portal and Gateway should reside in its own VSYS and not in my external vsys.But I would like to be able to use the same physical interface as the external vsys, is that even possible?I have tried to create a loopback interface with its own exte...

HansH by • Not applicable
  • 2485 Views
  • 1 replies
  • 0 Likes

domain filtering

Hello, I have a big network with thousands of systems, I have 3 domains , I want to know and log all access from outside off my network to any inside server that the url is different to *.mydomain.com.If i use url filtering and in block I put * and in permit *.mydomain.com all the outside access to my network are log including all to *.mydom...

javalero by • L0 Member
  • 2521 Views
  • 2 replies
  • 0 Likes

Security rule for url filtering - best practices?

I would like to know what is the impact, if any, when configuring a security policy with allow action and associate with a url filtering profile if we use application as any or application set to web-browsing.I understand the url filtering is only applicable to web-browser traffic by default, but i want to understand what is the best thing to do...

Borgiani by • L0 Member
  • 2398 Views
  • 1 replies
  • 0 Likes

License for IPsec and SSL VPN

Hi all, I need to know if we need a license to acivate or configure site to site VPN ( i.e: between Cisco ASA and PaloAlto), and also for remote client (ssl vpn). if it's possible can someone please help me with the procedure to follow for these two scenarios.Thanks in advance.

Lahcen by • Not applicable
  • 11221 Views
  • 1 replies
  • 0 Likes

Resolved! License for IPsec and SSL VPN

Hi all, I need to know if we need a license to acivate or configure site to site VPN ( i.e: between Cisco ASA and PaloAlto), and also for remote client (ssl vpn). if it's possible can someone please help me with the procedure to follow for these two scenarios.Thanks in advance.

Lahcen by • Not applicable
  • 4787 Views
  • 1 replies
  • 0 Likes

Stats Discrepancy in the ACC

Has anyone else noticed this?Go to the ACC and sort it by Bytes (I believe this trick works regardless of the sort criteria, but it’s easiest to see this way). Make a note of the top three or so valuesNext, Click on one of these, I picked the top: web browsing. Compare the total bytes now with the values you recorded before. About half? Me too...

djr by • L4 Transporter
  • 3400 Views
  • 4 replies
  • 0 Likes

Strange VPN behaviour

Hi all!Some of my colleagues have problems accessing certain services like TFS, Intranet, and Office 365(outlook, lync) through VPN. The weird thing is that for others it might work either 100%, 50% or whatever feels right that day, it seems.What could cause this kind of inconsistent behaviour?Appreciate all help I can get. Thanks!

Palo-Alto upgradation From 5.0.x to 6.0.x

Hi All, We are having PA-5050 & and PA-3020 model running on software version 5.0.8 & 5.0.9 and we are planing to upgrade it to 6.0.2. We firewall is running in Active/ Passive cluster. Please any one help to know the processes and suggest which version is stable between 6.0.1 and 6.0.2Also, I like to know what all the bug we have in 6.0...

Sourabh by • Not applicable
  • 2030 Views
  • 1 replies
  • 0 Likes
  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks