General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Threats alert

Hello Team,I have configured the panorama threat alert for one of our firewall and its working fine. Alerts has been configured for High and Critical .we are getting so many alert from one IP (10.32.100.238) , one of vulnerabilities management device . I want to create a rule so that we can exclude the alerts from the source IP 10.32.100.238 and...

tiwara by L3 Networker
  • 3091 Views
  • 2 replies
  • 0 Likes

EU - European Union

Is it possible to view the countries that are included in the "EU" object? When new countries are added to the EU, will this object be updated via dynamic updates or by upgrading?Does anyone have experience with the accuracy of geo ip on palo alto?Kind regards

Intermittent SSL decryption issues for some, not all.

My Palo Alto Firewall 2050 running 4.1.16. I am having a lot of intermittent SSL decryption issues. I'm not sure what to do with some of these. An example is https://app.plangrid.com. I can this site when I have made this change and restart my browser:> set system setting ssl-decrypt skip-ssl-decrypt yesSetting this back to the no re...

EdwinD by L3 Networker
  • 5178 Views
  • 2 replies
  • 0 Likes

Resolved! ftp export log

Anyone know how to translate this show CLI command into the ftp export equivalent? > show log traffic src in 10.0.0.0> ftp export log traffic ?? (assuming query would work)I would prefer not to export all logs only need a subset.Thanks,Monica

MLaden by Not applicable
  • 3685 Views
  • 2 replies
  • 0 Likes

Resolved! About a session generated by override rule

Hi guys,A session generated by override rule that can be applied rematch session after commit configuration successfully? Or not? I guess that rematch session would not impact to session generated by application override rule.Please let me know above question.Thanks.Regards,Roh

Resolved! Apply policy on a vwire interface in passtrough mode

I want to apply a policy on my vwire interface but i have this error: Operation Commit Result Failed DetailsIn VSYS vsys1 from zone VW-MPLS-Trust of type vwire and to zone UNTRUST of type layer3 are incompatible in security rule Application block Configuration is invalid Is it possible to know how to apply a policy to this interface, if ...

dsevigny by Not applicable
  • 3050 Views
  • 2 replies
  • 0 Likes

Disable Inspection for Sip ?

In the ASA you can disable SIP Policy Inspection. In the Junipers I think you disable the ALG. How do I do this in the Palo Alto ?Firewalls often try to apply rules around the way protocols work which can cause them to break. I dont want SIP to be inspected or held against some EEE Group Standard. This might be breaking some video conference tra...

jhickey by L3 Networker
  • 13295 Views
  • 6 replies
  • 0 Likes

Good Technology Issue

Currently, we are experiencing an issue with a product called Good Dynamics version 1.4.31.5. The vendor "Good Technology" is stating that the Palo Alto firewalls are causing an issue with some sort of SSL heartbeat connection. Is there an know issue with this software work through the PA architecture? Any help would be appreciated.Randy

Westar by L0 Member
  • 2000 Views
  • 1 replies
  • 0 Likes

machine authentication

hello!we have a need to identify user machines associated with a domain. specifically, we want to create security policies based upon domain membership. is that even possible, and how would we achieve this functionality?thnx!

Resolved! SSL Decryption Whitelisting

So, I have just implemented SSL Decryption in our environment and we hit a website that appears to not work properly because of it. (It's sap.com, click on the login link in the upper right.) We don't see any errors in the firewall but the login prompt doesn't come up for us.The question is, is there any way for me to whitelist *.sap.com from SS...

  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
Labels