This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Source NAT Dynamic Pool mapping for inbound traffic

I have configured Dynamic NAT on PA- 3260 where source address is a VLAN with a certain IP range mapped to a NAT pool (Many-to-Many NAT Policy according to PA documentation). NAT policy is working fine according to the session logs. I can see the packet IP translation taking place for the outbound traffic. The concept I wish to understand here i...

Ajay358 by • L2 Linker
  • 1214 Views
  • 1 replies
  • 0 Likes

Resolved! VPN certificate is not within its validity period - but dates match

Hello, I let the self-signed root and server certificate expire on my GP portal/GW so I regenerated both the root and server certificate (again, self-signed). I am still getting the error even though the computer time falls between the start and end date for the cert. Screenshots: Error message and certificate details with computer clock. ...

HELP! Need replacment ion 1200 power supply!!

Please Help, we have field technicians that lose the power supply to ION 1200 FW shipped back to our main office. We have close to 600 units deployed to the field. We need a stock of replacement power supplies! DOES ANYONE KNOW WHAT IS A SUITABLE REPLACEMENT AND MORE IMPORTANTLY WHERE TO BUY THEM. Thank You

T.Colvin by • L1 Bithead
  • 1347 Views
  • 1 replies
  • 0 Likes

Having issues with performing a factory reset on Palo Alto 3060

Hello Everyone, I went and followed a guide on a pair of Palo Alto 3060s I bought for my lab from eBay. The first unit I was able to login with the default user name and password and verify it was working no problem. The 2nd unit still had a config on it and I went and followed the guide to type maint to enter maintenance mode and do a factory r...

Resolved! How to download PanOS VM image

I am an individual(not business). I want to download Palo Alto VM image for lab test, may I know is this possible? If so, how could I do it? I have read some Internet post, it says I shall pay and get a "lab license"? If so, how much? In addition, suppose I take the "PCNSE" certificate, will I able to access VM image? or it has its own separat...

gxx11661 by • L0 Member
  • 2681 Views
  • 2 replies
  • 0 Likes

Panorama Virtual disk addition for logging - legacy mode.

Hi Team, We have panorama in legacy mode. We deployed it using 8.1 ova file by default it too 80GB storage and allocated 11GB for logging. Now we want to add additional virtual disk in esxi server. When we add additional disk it by following below KB. https://docs.paloaltonetworks.com/panorama/8-0/panorama-admin/set-up-panorama/set-up-the-panora...

Resolved! Unable to download new version

PA-440 running 10.1.13 update to 10.2.0, but when I download 10.2.0-h2 ...... admin@PA-440> request system software download version 10.2.0-h2 Download job enqueued with jobid 99 admin@PA-440> show jobs id 9 <response status="success"><result>Enqueued Dequeued ID Type Status Result Completed -----------------------------------...

Resolved! Monitoring Palo DB cloud service

Hi All, We recently encountered an issue where our firewalls got disconnected from Palo DB cloud database, the was due to a known issue in Palo OS we are running. I am looking for a way to monitor Palo DB cloud connectivity. We do not have solarwinds otherwise I would have used an OID to monitor that specific service. Is there a wa...

Resolved! Where does it show which Agent Config applied to a specific users' Global Protect session

We have multiple agent configs for Global Protect and apply them using OS type and group membership. I want to see which agent config was applied to a specific users session. Where do I see this? I have checked system logs, and it shows the auth profile but I don't see which agent config was applied to that user session.

Resolved! tcp/dynamic port range

I'm looking for a definitive answer on what port range "tcp/dynamic" and "udp/dynamic" uses. I would figure that it is 49152-65535, but I have not been able to locate anything in documentation or the community to confirm this.

Exclude www.google.* from decryption

Hello,are you able to exculde https://www.google.com ; https://www.google.de and other domains from SSL decryption?Or clients complain about the slow loading of the website when they open Google or try to search something.Currently i add in a white custom URL category:www.google.comwww.google.com/www.google.com/*www.google.*www.google.*/www.goog...

Hithead by • L4 Transporter
  • 13220 Views
  • 17 replies
  • 0 Likes

High availability Links on different locations

Hi, we have 2 PA1410 on two different buildings. They act in an active-passive cluster. On each location is a switch, and the Firewall ist connected with all of its port (ha1a, ha1b, ha2, MGM, Data) to the switch. The switches are connected though a glasfiber to each other. Does it make sense, to buy a fiber sfp transceiver for each firewall and...

IT-Esp by • L1 Bithead
  • 3126 Views
  • 3 replies
  • 0 Likes

Beaon PCNSE study guide - practise questions

Hi Guys did one of the prep exams and had a couple of questions marked wrong.. but not sure they were.. any ideas? Q1 GlobalProtect clientless VPN provides secure remote access to web applications that use which three technologies? (Choose three.) RubyHTMLHTML5PythonJavaScript (my selection in bold above) from PA DOCS they note this...

PA_nts by • L4 Transporter
  • 2238 Views
  • 2 replies
  • 0 Likes
  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks