General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4437 Views
  • 0 replies
  • 0 Likes

VPN strange behaviour

Hi,I have configured a VPN between JUNIPER SSG550 and PA-3020 (5.0.5) but this VPN is not going up. Yesterday I was configuring this VPN almost 4 hours until finally vpn went up but i checked this morning the vpn state and its down again and nobody has changed the config ...weird.... I have checked the VPN config and i have created the VPN aga...

SOC_CSG by L4 Transporter
  • 6710 Views
  • 8 replies
  • 0 Likes

gmail-base without smtp, pop3, imap applications

Hello,I don't really get the application dependency. I had a case at my customer. They asked me to allow gmail-base application, so I made security policy. But when I committed the settings a popup appeared that told me that additional applications should be allowed.Like smtp, imap, pop3, ssl. But I don't want to allow them. How can I do this?th...

HIP Check?

I have a client that fails HIP Profile check but he should not. Where can I find the reason for the failure?Is there a log that can shows the HIP check.The HIP Match Log in the Monitor only shows clients that Matched the HIP Profile.Thanks,

tomm by L0 Member
  • 2623 Views
  • 1 replies
  • 0 Likes

Problem with system logs

HelloI realized that something wrong is with system log. On dashboard I have "No data available." in "System Log" sections.In Monitor > system log I have a lot ofI did :debug software restart device-server debug software restart management-server This problem occur because yesterday I worked with support engineer. Unfortunetelly we leave pack...

_slv_ by L4 Transporter
  • 9334 Views
  • 12 replies
  • 0 Likes

How many DHCP bindings are in use?

All,I've been digging around and as far as I can tell there isn't a way to just show me how many DHCP bindings are currently in use, is there?I have interfaces that are serving up /21's of addresses and I'd love to be able to just run a quick command telling me: There are 567 addresses in use out of 2000 or a % or something. As far as I can tell...

steveo by L3 Networker
  • 4228 Views
  • 4 replies
  • 0 Likes

Resolved! Batch add applications to policy?

We have 3 PA-3020 firewalls, one at each of our main branches. For the first month I blocked a few high risk applications then allowed service ports 80 and 443. After collecting log data for about a month, I combined all 3 location's logs to one spreadsheet and deleted everything except the Application column as well as sorted to remove duplica...

ezXploit by L1 Bithead
  • 6724 Views
  • 3 replies
  • 1 Likes

How to export traffic log for full day?

Hi,one more stupid question:I'm using scheduled log export (scp protocol). How to export traffic log for full day? When I'm viewing exported log (csv format), I'm missing third of the day, because in csv file is just 1048576 rows. And I fink PA firewall can export just 1048576 rows. Am I wrong? Any solution? Or I must use log export to syslog se...

Interface by L3 Networker
  • 6226 Views
  • 1 replies
  • 0 Likes

Delete Custom Traffic logs

I want to know how to delete custom traffic , as the database exceeds alarm threshold, and i have exported traffic logs and i need to clear the exported dataRegards

Resolved! How to open exported logs?

Hi,I exported PA logs (all database) with cli command "scp export logdb to user@10.1.1.1:/logdb". Question: can anyone show me a software, which can open exported PA logs? Thanks.

Interface by L3 Networker
  • 6146 Views
  • 3 replies
  • 0 Likes

Resolved! Commit Error after Panorama Upgrade to v6.0

Hello guys,We recently tried to upgrade our Panorama from version 5.1.5 to version 6.0. The upgrade itself was okay, but we were unable to do commits to devices still running v5.x afterwards. It looks like it's related to custom application signatures we created in Panorama and pushed to the devices. The error message we got was:Before the upgra...

oschuler by L4 Transporter
  • 4755 Views
  • 4 replies
  • 1 Likes

How to enable safe search in youtube?

Hi All,How to enable safe search in youtube? example : Allow youtube but deny adult content (porn videos)I tried by allowing "youtube-safety-mode" app and blocking "youtube-base", but giving app dependency warning. ( youtube-base needs to be allowed Regards,Gururaj

Gururaj by L4 Transporter
  • 10068 Views
  • 13 replies
  • 0 Likes

www server in DMZ - what aplication should me allowed?

HiMy www server is in DMZ, I have strict security policy that allow:- web-browsing- web-crawler- ssl- rss- flashI have application -default as a service.Is it enought for indexing services like Google and any other?RegardsSLawek

_slv_ by L4 Transporter
  • 8609 Views
  • 14 replies
  • 0 Likes
  • 24374 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels