General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Does FW use ospf version 3?

HelloI am facing ospf issue so need some help.Please look at the routd.log as below."OSPF 3 Non-Hello packet could not be matched to an active neighbor" -> What does it mean?And does FW use ospf version 3 as above message?I found out "RFC 1583 Compatibility" in ospf menu.If I will set up enable "RFC 1583 Compatibility", Does FW use ospf versi...

webpage displays improperly

I am using a PA-500 software vers 5.0.10 with BrightCloud filtering package at vers 4231. I am having problems with getting some webpages to load in the proper format. Classroom20.com (categorized as Computer and Internet Info; Personal sites and Blogs) will load fine for a user that has no filtering restrictions. However, it will not load p...

Resolved! BGP Configuration

What is the impact of not selecting 'Exact' when entering prefixes in the import or export tab in BGP configuration? I assume the exact must match the prefix entered.But if exact is not selected, what is permitted through? If 10.0.0.0/8 is the entered prefix and exact is not selected, is this saying 10.0.0.0/8 le 32, basically any prefix in the ...

RFalconer by L3 Networker
  • 9554 Views
  • 1 replies
  • 0 Likes

Resolved! GlobalProtect and logon scripts

Hello. Is it possible to launch a logon script to map drives after connecting with GlobalProtect in on-demand mode? I know we could create a script to launch manually after a connection to map the drives but would like an automated method.Thanks!

ldavie by L2 Linker
  • 8300 Views
  • 5 replies
  • 0 Likes

PA Platform Upgrade/Migration

We are about to upgrade from two PA-500s (in HA) to two PA-3020s (will be in HA as well). Is the process as simple as exporting the configs from the PA-200 and importing them into the PA-3020s? Will there be a lot of tweaking needed because the 3020s come with dedicated HA ports and the 500s don't. I couldn't find any good documentation or posts...

Resolved! No way to view sites that are set to "Allow"?

Is there a way to view sites that are set to "Allow" or are in the "Allow list"? I can see the "Allow list" sites via the Application Command Center, but is there any way to view them in the "Monitor" tab or through reporting?

jambulo by L4 Transporter
  • 5146 Views
  • 6 replies
  • 0 Likes

AET & PAN

Hi everybody,last week I had a Stonesoft engineer in my lab demonstrating their techniques of exploit attack via AET. I tested my PAN NFR units (PA-200 & PA-2050) with IPS license last update, together with other vendors IPS units, protecting 2 pretty vulnerable client (one win xp sp2 the other ubuntu 6.04) .The result scared my quite a bit....

NGS_SOC by L3 Networker
  • 5735 Views
  • 5 replies
  • 0 Likes

Resolved! Aggregate Interface Failover

Hello, Is it possible to have two interfaces configured as aggregate interfaces in one AE group in way that if one interface goes down it does not force a failover to the backup firewall? Here's some background...I have two PAs set up with high availability. I have configured e1/1 and e1/2 as aggregate interfaces joined to the aggregate group ae...

MarkTan by L2 Linker
  • 4216 Views
  • 1 replies
  • 0 Likes

PA3050 Install

Install of a PA3050 from Cisco ASA. Getting data transfer errors and mail in a degraded state. Some mail is getting deferred from the mx servers. Some tcp syns are not being acknowledged correctly. Anyone see these same type of issues after a PAN 3050 install. Nat in place for external mail servers.Thanks,

Layer-3 Active/Active mode with ARP load-sharing

Hi AllI'm just wondering, if I'm using layer-3 sub-interfaces in active/active mode, is it possible to create ARP load-sharing for each sub-interface on both PA.by EX: sub-interface 1.102 with IP address 192.168.102.2 on PA-1 and 192.168.102.3 on PA-2 ARP IP 192.168.102.1sub-interface 1.110 with IP address 192.168.110.2 on PA-1 and 192.168.110....

  • 24412 Posts
  • 125 Subscriptions
Top Solution Authors
Labels