General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4227 Views
  • 0 replies
  • 0 Likes

Resolved! address object strange behavour

Hi I create a address object base on a network address like 192.168.21.0/20 and when I used it as source address in my policy base forwarding rule this never matchbut when I create addresse object with a range like 192.168.16.1-192.168.31.254 and when I used it as source address in my policy base forwarding rule this matchwhat wrong ?is it bug?o...

Gregoux by L4 Transporter
  • 2942 Views
  • 3 replies
  • 0 Likes

Resolved! USER ID agent wmi probing

Hi something strange with old version of user-id agent version 4.1.6-5the user is connected on the network lan with wire and is authenticated on the active directory the result is the user is identicated in the traffic log If the user switch from wire connection to wifi connection the wmi probing should detect the new ip affected to user? or no...

Gregoux by L4 Transporter
  • 7850 Views
  • 5 replies
  • 1 Likes

PA's security advisory stance needs fixing. PANOS less that 5.0.9 contains XSRF and I just happened to stumble on this, on an unrelated site

I just stumbled on this security advisory while I was googling something totally unrelated...http://packetstormsecurity.com/files/124184/panp-xssxsrf.txt"These issues have been fixed in PANOS 5.0.9, mentioned in the release notes like this:57343—Fixed an issue that caused improper handling of imported certificates that contained HTML."Also I thi...

Global Protect client issue - really annoying

This one has been bugging me for a long time and I've just been brushing it under the table, well new year, new resolve, so I thought I'd ask the smart people if anyone else has seen/experienced/fixed this.My organisation has the Global protect client installed on all our laptops by default, regardless of if the user is office based or remote.Al...

darren_g by L4 Transporter
  • 11690 Views
  • 12 replies
  • 1 Likes

Using application categories in security rules.

Hi all,I am in the process of configuring security rules to allow some applications for a particular user group, These applications I am taking from the app category "internet" & "Media", (131 applications in total) this I could do by adding these applications to a application group and applying it to the rule. In the same application group...

HughWalsh by Not applicable
  • 3332 Views
  • 1 replies
  • 0 Likes

Wildfire Analysis Email Alerts

Hi,Can you confirm how quickly we should be receiving the Wildfire analysis report following a malicious file detection?I have a wildfire upload that occured at about 2am GMT, I have the PAN log message reporting the upload, and in the PAN Wildfire THREAT log I can see it has been logged as malicious and links me to the online portal with the an...

apackard by L4 Transporter
  • 2512 Views
  • 2 replies
  • 0 Likes

Resolved! What is the maximum number of AD users per AD group?

Hello guys.I have a question about group membership of AD.What is exactly the maximum number of AD users per AD group on the Firewall? How much PAN recognize the maximum users per AD group from AD? There is no limit? or has limit?If it has a limit, Please let me know Thanks in advance.Regards,Roh

Resolved! Can not use captive portal

Good afternoon!I'm configuring captive portal to authenticate user through Radius. I followed steps on How to Setup Radius Authentication for Captive Portal ( enable UI on source & destination interface => create Radius Server Profile and Radius Authentication Profile => enable Captive Portal on UI with that Radius Profile & Transp...

About group-name contains special character

Hello guys.I have a question about group name could contain a special character such as & ! * from ActiveDirectory. I think it is not working properly if group name contained special character. Customer have using GlobalProtect with LDAP authentication from AD as a AD group and AD group has special character &. User could not be authenti...

Custom Vulnerability Not Showing Correctly In Reports

Hi, we're running 5.0.6 on our firewalls and 5.1.5 on Panorama.I have some custom vulnerabilities that, when triggered, do not show up correctly in reports (Monitor Tab, ACC etc).Only the reference number is show, not the name, description or assigned risk.We have had this issue since v4, and had hoped that the v5 upgrade would fix, but still ex...

apackard by L4 Transporter
  • 3773 Views
  • 5 replies
  • 0 Likes

Wildfire Not Downloading

We have around a dozen firewalls licensed for WildFire (technically they are on the 1 month trial while we arrange to deploy our paid-for licenses - which might impact the following question..)The issue I have is that 1 firewall is now about a day behind the others with downloads because, every time it performs an update check it comes back with...

apackard by L4 Transporter
  • 3483 Views
  • 3 replies
  • 0 Likes

Resolved! How do I debug NTP not working?

(active)> (active)> show ntpNTP state:NTP synched to LOCALNTP server secondaryNtpIp connected: FalseNTP server primaryNtpIp connected: FalseI tried debug software restart ntp, waited a while and got the same results. The time's off my system clock by less than a minute.

ddaniels by Not applicable
  • 23024 Views
  • 7 replies
  • 0 Likes
  • 24355 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels