This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Optimizing a particular website

We have a website which all of our 500 users use daily. Our users do a lot of streaming (youtube, netflix, you name it). Depending on the user the "allow" rule for http, https and New-relic coudl be as much as 40+ rules down.Would it be beneficial to put a rule specific to that URL at the top of the site and disable AV, antispyware, "disable s...

BobW by • L4 Transporter
  • 4387 Views
  • 3 replies
  • 0 Likes

Importing a Customized Captive Portal Response Page ... Uploading forever

Hi guys,I´m trying to import in PanOS 4.1.11 a Customized Captive Portal Response Page and when I click on Import the result is a Dialog Box that says Please Wait and Uploading for ever and ever.Can somebody tell me how can I import this customized response Page?Is it a bug? When i imported a URL Filtering both Block and Continue / Override Page...

Pepen by • L1 Bithead
  • 5143 Views
  • 5 replies
  • 0 Likes

Domain User Names not showing in Group-Mapping

This is driving me crazy and looking for some input...I have the User-ID Agent installed on my single domain controller which is running fine and connected to the PAN on version 5. Using an example below (my domain is different), I've duplicated the Group mapping setting, but expanding the Group Include List, I can see all the groups, just not D...

robg303 by • Not applicable
  • 10139 Views
  • 9 replies
  • 0 Likes

Resolved! Device administrator rights

Hi, -one stupid question: why "device administrator" can't load, export/import configuration (can only superuser)? In Setup -> Operations tab only setting is - validate candidate configuration.. If i create custom Admin role with all rights, in setup -> operations tab i only can validate configuration. And reboot device, shutdown device, ...

Interface by • L3 Networker
  • 5928 Views
  • 3 replies
  • 1 Likes

Resolved! Tracking an infected computer

I got a notice from my ISP that we have a Conficker infected system (downadup) but I am coming up with nothing when I try to find it. The less than helpful info I recieve is the first octet of the target IP (38) and source port 61494, which map to hundreds of system. I also have a destination port of 80, again very helpful. The firewall is NA...

Resolved! Can I create custom application with destination IP and TCP/UDP port?

Hello,I know that FW can control application correctly when has L7 signature.But my customer want to create application signature more simple and easy for internal trust server.For example, There is 192.168.1.1 web-server. He want to create app "our-web-server" for destination IP and port are 192.168.1.1:80.Can FW be available?Thanks.

Resolved! Replay pcap

Is there any way that I could feed a pcap into the firewall? What I would like to do is take a pcap and run it through a monitor port to test out some rules and IDS settings. Right now my plan is to use tcpreplay, but I was curious if there was any way to do this natively in the firewall.

hkp by • Not applicable
  • 7635 Views
  • 4 replies
  • 0 Likes

report custom

HelloI'm looking for solution how to create custom report that shows login and logout of Global VPN users. In this report I need time of connection/disconnection IP login name and status (success or false) of connection.Help me pleaseWith regardsLuigi

Active Directory Group not in dropdown

I have created a new group in Active Directory, but the PAN doesn't show the new security group in the drop down menu (Security Policy Rule -> User.Add) when adding a new policy. Is there something more that I need to do?

bmilroy by • L1 Bithead
  • 4343 Views
  • 5 replies
  • 0 Likes

Possible ?

A useful feature would be the ability to create a filter for Traffic logs where one wants to display all traffic initiating or terminating from/to addresses a pre-defined "address-group". At the moment one has to, in essence, re-do the address-group definition in the traffic filter.With a complex pre-defined address-group it would be nice to be ...

panorama : replace logging disk with bigger one

Hi, Our logging disk has to be largened on our Panorama.How can i add a new larger disk, keep the current log, and remove the old smaller disk when the logs have expired ?Or do i just have to remove the old disk, add a new disk and forget the old logs ?greetzSebas

Default Gateway from the Palo Alto Firewall is not reachable

Hello,I have configured inside, outside and DMZ on the Palo Alto firewall. The outside interface is configured for Global Protect.The default gateway of Palo Alto firewall is not reachable. But when we connect to that cable to ASA firewall we are able to ping gateway.Please help us to troubleshooting the issue.Regards,Parvez

Resolved! Alert Config

Folks,I would like to configure the PAN firewall to send an email alert whenever the firewall config is changed or edited . Any ideas on how to accomplish this ?Thanks

usvi by • L3 Networker
  • 6889 Views
  • 3 replies
  • 0 Likes

Size of Logs

Hello Guys,I would just like to ask if anyone of you have an idea of what is the usual size of the logs that is being forwarded daily?We are trying to size up a logs correlation software and we would like to know the amount of specs that we need. the only factor is the size of the logs that will going to be transfer.Thanks guys.

  • 24448 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks