General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Login issue with 6.0.0?

Has anyone noticed a login issue since upgrading to 6.0.0? It seems inconsistent, but when I log in from the outside interface, I will get the message, "Creating administrative session. Please wait". I will then get returned back to the login prompt. If I VPN in and log in from the inside interface, I will see all my hung login attempts from...

Rjschultz by Not applicable
  • 5368 Views
  • 8 replies
  • 0 Likes

Certificate errors on VPN portal - how do I make it work?

So our PA runs a Global protect portal/gateway on it. We have actually gone out and purchased a legitimate SSL certificate for the portal address and installed it.However, *every* single F***ing time I save the config, I get "Warning, cannot find complete certificate chain for "Certificate_name".".There are also *some* browsers and client instal...

darren_g by L4 Transporter
  • 2019 Views
  • 1 replies
  • 0 Likes

Performance Problem with PA 500

I recently upgraded my bandwidth to fiber with my provider. They added a router in the mix that was not there. It has an external IP and and internal IP address. The old setup only had an external IP (which is the IP that was configured in my firewall natting rules.) My upload speed is around 90mb, but the download speed is not even 5mb. . ...

Resolved! Firewall management IP.

Can the ip address for the firewall web interface be reached through a virtual wire, or is it required that a https management profile be assigned to a layer 2 or 3 interface?

Netwerx by L2 Linker
  • 5973 Views
  • 6 replies
  • 0 Likes

Captive Portal - How are you using it?

Hello All, I am configuring our Captive Portal and was wondering how other sites are using Captive Portal? We have 2 primary use cases - - Shared Workstations - Unidentified Devices (Macs, Mobile Devices) How successful has your Captive Portal implementation been?ThanksArt

Art by L3 Networker
  • 2279 Views
  • 1 replies
  • 0 Likes

Resolved! Radius Authentication

Hi,We have set up Radius authentication on Panorama and PAN firewalls and it is working fine, but, no superuser access; How do we allow superuser access in this case?Thanks.

MMCiobanu by L3 Networker
  • 5568 Views
  • 4 replies
  • 0 Likes

Terminate Session

Hi allis clearing the session from Session browser terminate the session which is open , as it still show up and the bytes are still increasingRegards

PA500 and Avaya Switches using MLT

I have 4 Avaya switches (A,B,C,D) that are in a MLT configuration, I need to inject a PA-500 between. Will V-wire and AE work connect the switch "A,B" to switch "C,D", A/B & C/D are stacked and each set would be considered 1 switch. AE is needed to provide more through-put.

tuckert by L0 Member
  • 2615 Views
  • 1 replies
  • 0 Likes

Resolved! Come April will PA firewall be enough?

Hi there,Like most people I know, everyone has at least 1 windows xp computer on their network. Due to the nature of our business we have a few (some due to legacy apps). But my question is that, come April and Microsoft's cut off point for support, will having one of these operating sytems behind a Palo Alto firewall that has Anti-virus and thr...

JRussell by L3 Networker
  • 4697 Views
  • 4 replies
  • 1 Likes

How to determine Average Peak Traffic for PA-200

I am a newbie to the Pan-OS and would like to fine tune the Zone Protection profile - Syn flood settings, etc. based on our average peak traffic (packets per second). What is the easiest way to determine the average peak packets per second?

Resolved! Zone Protection Flood Protection Max Packets per Sec And new sessions per second values.

Hi,Could someone help me understand the impact of enabling Flood Protection on legitimate connections. If I have a 3050 as an external firewall protecting a website having high transaction how do you make sure the TCP flood protection with "random drop" value set does not kill legitimate traffic. Does is make any sense to have a flood protection...

Resolved! ms-update and MS Internet Explorer root CA

Hi,In my company, we explicitely block the application ms-update to control workstations update policy.But I realized that MS internet explorer tries to update its "root list sequence number" at each HTTPS connection.The file that MS IE tries to access is at :www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txtI...

mattieub by L0 Member
  • 4016 Views
  • 3 replies
  • 1 Likes
  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
Labels