General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4254 Views
  • 0 replies
  • 0 Likes

Resolved! Phishing - why not blocked?

HiOne of my users send me email with phising link inside. Message was badly translated to polish so I hope no one will be fooled.I try to see what will happend if I click on it on test VM. Webbroser open webpage without any warning!!Where I can report this webpage as a phising one? IT ADMIN CENTER. <<think twice before clicking! who know w...

_slv_ by L4 Transporter
  • 3490 Views
  • 2 replies
  • 0 Likes

how to block access to firewall

Hi .How to block access to firewall ?i have PA on public IP adress, but i want allow access only for 1-3 ip address.i need to add this addres in DEVICE--> MANAGEMENT -->MANAGEMENT INTERFACE SETTINGS in Permitted IP Adrressorcreate a policy ??

Global Protect and proxy

Hello,I'm using global protect to connect to some of our customers (using dual factor authentication).Inside my company, Internet access needs to go through a proxy.Because the proxy asked for authentication, we create exception inside the corporate firewall to allow Global protect to connect directly to customer site.Inside the proxy, I created...

licenselu by L4 Transporter
  • 2446 Views
  • 1 replies
  • 0 Likes

The connection status on global protect agent was not changed from 'connected' to 'not connected'.

I am glad to meet you.Some users was done time-out on global protect. The tunnel was expired.But GP Agent status was ‘connected’ not ‘not connected’. Why was not the connection status on global protect agent changed from 'connected' to 'not connected'??Please look at the attached file.And PANOS is 4.1.15 with GP agent 1.2.6.Thanks.

Resolved! Have a site being blocked I cannot seem to unblock

I am having an issue where just a download for a printer driver is being blocked but cannot get it to be let through and need some help.The site is ricoh.com and we can get there no problem. You can navigate the site as well but when you find the download you need and click it you get a web page blocked page. It points me to one of our custom UR...

JeffTQT by L2 Linker
  • 8968 Views
  • 2 replies
  • 0 Likes

TrendMicro Officescan Updates aren´t recognized correctly

Hey folks,I´ve been having some trouble regarding TrendMicro Officescan. I made a policy which allows ‘trendmicro’, ‘trendmicro-officescan’ and ‘web-browsing’. The reason for adding ‘web-browsing’ was, that trendmicro usually get updates via normal http on Port 8080. I did this even though ‘trendmicro-officescan’ lists tcp port 8080 as one of th...

VUGD by L1 Bithead
  • 3306 Views
  • 2 replies
  • 0 Likes

Captive Portal don't show pages until refresh

HelloI'm having a curious behaviour with Captive Portal and web navigation, this is the situation.Every computer IN Windows Domain doesn't have any problems, user can navigate without issues, but computer or other devices (tablets, smartphones, etc...) which not belongs to the domain, when open a web page they are prompted to log in, when they l...

SOC_CSG by L4 Transporter
  • 2484 Views
  • 1 replies
  • 0 Likes

Resolved! how to make an exception for the specific case of vulnerability?

HiI found on this forum couple topic with examples but it desn't work for me - I don't know why.I have Thread lod filled with vulnerability: "HTTP OPTIONS Method" (id 30520) and "SSL Double Client Hello Cipher Suite Length Mismatch" (id 32467)I'd like to make exeption for it. But when I tryedto edit my Anti Spyware profile I cant find such idPle...

_slv_ by L4 Transporter
  • 7254 Views
  • 6 replies
  • 0 Likes

Problems with Custom Reports?

Has anyone else had issues with creating custom reports and then having them emailed via the scheduler? I have built an extensive custom reports list that allows us to see into the detailed traffic to discover infections, spyware, and an assortment of other information to discover things that the PAN does not alert us on. The problem is, that th...

craymond by L4 Transporter
  • 2970 Views
  • 2 replies
  • 0 Likes

Resolved! EDNS?

Has anyone implemented EDNS on their network? How does the firewall treat it? Is it just as DNS? Does it block it because the packets are too big?Does anyone know if there is a plan to make it its own discreet application?Thanks for the info...Ben

EDNS0 Packet blocked

Hi,We have internal DNS’s that send query EDNS packets andthose packets apparently are blocked by our Firewall (PA-3050 IOS Version5.0.2)I didn’t find any doc or discussion here about this issueCould someone help me to allow those packets pass throughour FW. (increase the DNS packet size as described for example below for ajuniper FW)Thanks a lo...

BSadozai by L2 Linker
  • 8169 Views
  • 2 replies
  • 0 Likes

Strange Log/Report Request

This idea might be a little strange so I apologize if it isn't completely clear.Currently, we get a daily PDF report from our PAs that include items like the top 5 egress interfaces, threats, etc. Our security team has been interested in these reports lately and I have been reviewing the findings with them on a daily basis. I feel that most of o...

TeamSpeak 3.x not recognized by App-ID

TeamSpeak is a voice app that uses a proprietary VoIP protocol. The 3.x version of TeamSpeak was no longer recognized by its existing App-ID, so I've captured some packets and submitted it to TAC for an update. This updated app-ID is targeted for release in the content database 380.

mancelin by L2 Linker
  • 4804 Views
  • 5 replies
  • 0 Likes
  • 24362 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels