This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Guest VLAN issues with externel services that we offer

Here's what we need to accomplish:We have subnets on our networks that need to use our external DNS server (they are Guest VLANs for our WiFi networks). This traffic is visible by our paloalto firewall with layer 3 adresses (10.XXX.30.0/23). When we access internet with these clients we have no issue at all but when these clients try to access o...

Inline PA vwire on inside interface of Cisco ASA HA/pair inline

I am currently running a pair of Cisco ASA 5520 in HA. I want to protect the traffic going inside with an inline wire on the inside interface of Cisco ASA HA/pair as it travels to the LAN. A pair PA-2020 are configured in Active/Standby with the wire trust/untrust pairs running inline after the ASA HA pair. Untrust zone going to the ASA and ...

mpitogo by • Not applicable
  • 3031 Views
  • 1 replies
  • 0 Likes

Global Nat

How can you determnine what the global nat address is on a firewall?

infotech by • L4 Transporter
  • 2884 Views
  • 4 replies
  • 0 Likes

Resolved! How to setup multiple vpn?

Hi,In our enviroment we have since a month a PA500. We setup VPN with pre-logon with certificate for our internal users, which is very handy!But for our external users I want, they use there AD credentials. Is it possible to setup multiple VPN's? One for our internal users and one for our external users?And if so, how to configure this?Thanks in...

ZEBIT by • L3 Networker
  • 7709 Views
  • 10 replies
  • 1 Likes

Wire shark

I am trying to troubleshoot why I am having issues with a certain VPN router device through the PA 3020 firewall, This is the message on the packet captureISAKMP Identity protection (main mode).I am new to firewall and if there are any other troubleshooting methods I can use I would appreciate the advice. commands, gui anything

infotech by • L4 Transporter
  • 4631 Views
  • 5 replies
  • 0 Likes

Ping

Can you send ping test from the PA and if so how is that done?

infotech by • L4 Transporter
  • 2660 Views
  • 2 replies
  • 1 Likes

Stability Issues with 6.01

Hello,since our pa 3050 (HA Active/Passive) is running 6.01 i discovered some issues: The device server sometimes hangs, there is no other option than restarting it (debug software restart device-server) This happens approximately once a day. In this state, SNMP requests to the PA take several seconds to complete, a commit will hang. I wonder, ...

Is it possible for a web page to discover if SSL decryption is active?

DUPLICATE POST - please see Decryption: sec_error_reused_issuer_and_serial for further info.----Hi folks,We recently re-activated SSL decryption in some of our branch offices. Now of course reports are coming in that certain web pages can't be displayed correctly anymore. Our Italian collegues for example report that they have problems with Goog...

oschuler by • L4 Transporter
  • 3056 Views
  • 2 replies
  • 0 Likes

Panorama M-100 GUI timeout

I have a problem with a Panorama M-100 running 5.1.4, where sessions in the web-gui seems to time out before they have reached the "idle timeout" configured under Panorama/Setup/Management/Authentication Settings. What happens is that after being inactive for a few minutes (10-20 min), I do no longer get any data when navigating to a new menu it...

torm by • L4 Transporter
  • 3248 Views
  • 2 replies
  • 0 Likes

Resolved! Google search problem

Dear all,I'm writing to ask a question about the image that I'm showing you.My user can see only a part of the images when he search for that.This is the result of a search with google images:I've read this thread:https://live.paloaltonetworks.com/docs/DOC-3328But, in the end, the problem that I've is slightly different: I can see something up t...

Global Protect Radius Child Domains

Global Protect using Radius works perfect for users in the parent domain. It will not work for users in child domains.I worked with Palo Support for several hours and they believe the issue is a setting on the Radius server but they do not know what the settings on the Radius server should be for child domains.Does anyone know how to set the Rad...

ddavis1 by • Not applicable
  • 3162 Views
  • 2 replies
  • 0 Likes

Skype performance tuning

Good morning everyone,I've been testing a PA-200 unit here and I have a certain issue with Skype, which is mostly due to Skype being very weird about how it uses the network.Most threads I found around here are about blocking or controlling Skype somehow, but my question is the opposite.How would you configure your firewall to ensure that Skype ...

Guillaume by • Not applicable
  • 3455 Views
  • 1 replies
  • 0 Likes
  • 24403 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks