General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Globalprotect Smart Card configuration

So my company is working to setup a new PKI infrastructure with smart card logins for the users. I have looked at all the 2FA and associated articles about setting up the VPN but it leaves a lot to the imagination. I followed the steps creating the c

...

j.bartha by L1 Bithead
  • 3977 Views
  • 4 replies
  • 1 Likes

Using Loopback interfaces for a site-to-site IPSEC VPN

Does anybody have experience configuring site-to-site IPSEC VPNs using loopback interfaces instead of phsical ones?  If you are going to respond with a sassy comment (e.g. Why are you doing that?  or That's dumb!) then please don't respond.  I have a

...

merrick by L1 Bithead
  • 10893 Views
  • 11 replies
  • 0 Likes

Resolved! Ping an IPv6 Link local address

Hi,

 

Is it possible to ping a IPv6 link local address from a Palo Alto firewall? If so, what is the syntax on the firewall CLI?

 

I know other platforms allow you to define an outgoing interface when pinging a link local address, but this doesn't look t

...

Ben-Price by L4 Transporter
  • 1362 Views
  • 3 replies
  • 0 Likes

Ignite 2021 is Two Weeks Away!

Hi everyone,

 

Ignite 2021 is just two weeks away and the LIVEcommunity team has been sharing weekly blogs to keep you updated on the latest news related to this event! 

 

Last week we shared information about the Agenda. We also added some informati

...

jdelio by Community Team Member
  • 1050 Views
  • 0 replies
  • 2 Likes

Captive portal palo alto issued with chrome

Hi all

I use captive portal on palo alto just zone Lan to internet and found issued about chrome

My client have window 7,8 and palo version 8.1

Test on firefox need open firefox and click to option for login to internet

But on chorme not option for click

...

Migration FROM PA-850 to PA-3220

Dear:

Good afternoon, what is the best migration option from a Palo Alto PA-850 to a PA-3220.

 

Thinking for example to be able to keep the self-signed certificates in the PA-850, used for Global Protect.

 

Based on your expertix and experience, what is t

...

Metgatz by L3 Networker
  • 748 Views
  • 1 replies
  • 0 Likes

Resolved! Custom URL category *.github.com not matching/working

I read some posts here about the best way to allow github to only *.github.com IPs and I can't seem to find an easy way to do it. 

 

If I do it this way:

 

 

Source IP – on-prem networks Destination - Any APP ID/Service – github/ssh/ssl/web browsing URL c...

drewdown_0-1635537126636.png
drewdown_1-1635537211464.png
drewdown by L4 Transporter
  • 1940 Views
  • 4 replies
  • 1 Likes

Commit Lock

Hey all,

Has anyone found a way for a non-superuser to remove a commit lock?

I'm aware the official line still seems to be only a superuser can remove the lock, and this is definitely the case in PANOS 9.0 but hoping there might be a way to have this a

...

VM Series validation Failed

where to check to troubleshoot the VM Series issue, as we are getting errors for the VM Series Plugin validation Failed. Please suggest if there are any specific logs or packet capture we have to look into.  

 

Error : - Resource-mgr-endpoint is invail

...

VM Series Plugin.png

PA-3260 PAN OS 10.0.7 "Source User" Not Working

Hi - Trying to configure/setup source user however it is not working.

I configured my 2 domain controllers under Device\User Identification and added a valid domain account ,they show as connected.

All other settings are default , I am not sure what el

...

Scott64 by L1 Bithead
  • 572 Views
  • 1 replies
  • 0 Likes
Top Solution Authors
Top Liked Authors