General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How to control URL Filtering bypass by IP?

Hi all,

How can the Palo Alto control the age-old URL filtering bypass of typing in the IP address of a site, rather than the hostname?

As an example, some of our students last week did:

1. www.minecraft.net via web browser is blocked (category: games)

2

...

Resolved! group mapping

Hi,

We have 5 ldap profiles with different domains.When adding group mapping for each we can see all gorups without problem.After we add and commit all gorup mappings disappear in gorup mapping tab.(deleted)

Any idea ?

panos by L6 Presenter
  • 2592 Views
  • 4 replies
  • 0 Likes

Resolved! authentication profile LDAP

Hi,

When l go to authentication profile and select "add" under allow-list for a LDAP connection it does not list all Active Directory Groups from our Domain ?

We are currently on PANOS version : 5.0.3

I also have the User ID Agent setup on both of our W

...

acmi by L1 Bithead
  • 2664 Views
  • 4 replies
  • 0 Likes

Resolved! System fan speeds?

Hi.

I've recently implemented a new monitoring system (see thread in the devcentre forums) called Observium, and one of the things it does is read *all* the SNMP sensors out of the Palo Alto devices.

I noticed that it was reporting the fan speeds on my

...

darren_g by L4 Transporter
  • 4848 Views
  • 6 replies
  • 0 Likes

Resolved! 5.0.5 Management CPU?

So, I finally got to upgrade my 2020's to 5.0.5 (not been able up to now owing to operational requirements) after hearing from our PA rep's tech guys that it's mostly stable now, and he hasn't heard any bad reports on it.

However, it seems the high ma

...

darren_g by L4 Transporter
  • 5154 Views
  • 9 replies
  • 0 Likes

iOS Globalprotect VPN question

So I'm going through the document here:

https://live.paloaltonetworks.com/servlet/JiveServlet/downloadBody/2016-102-8-14087/GlobalProtect-Config-Apple-iOS-RevD.pdf

I have an existing / configured GlobalProtect portal for VPN usage for PCs/Macs.  It loo

...

bradenmcg by L3 Networker
  • 2180 Views
  • 1 replies
  • 0 Likes

Resolved! GlobalProtect 1.2.2 disabled Windows auto-login

We are rolling out the GlobalProtect client to our campus community and we came across this behavior.  When we install the GlobalProtect client, it disables the auto-login feature for some of our Windows machines.  This is a non-issue for me, but som

...

mcw015 by Not applicable
  • 3606 Views
  • 1 replies
  • 0 Likes

Resolved! url filtering speed

Hi,

When enable url filtering page loads late.Same page loads very quickly when disable url filter.

All sites same issue.any idea about that ?

panos by L6 Presenter
  • 4437 Views
  • 10 replies
  • 0 Likes

What is 'cotp' ?

Hi,

-----------------------------------------------------------------------

A new 'cotp' App-ID will be available in the upcoming content update for the ISO transport protocol 8073 over TCP. When allowing applications such as ms-rdp, t.120, and iccp, t

...

komure by Not applicable
  • 16374 Views
  • 2 replies
  • 0 Likes

Resolved! How to create custom response pages

Hello,

I know that the Device -> Response pages menu allows to modify response page, but how can I add my own response page ?

What I would like to do is displaying an advertisement page when traffic is blocked during working hours (using schedules).

Is

...

ldormond by L3 Networker
  • 4964 Views
  • 6 replies
  • 0 Likes

Inbound NAT with DHCP

Hi,

Is it possible to do a inbound NAT when the outside/untrust interface is a DHCP client?

Here is the NAT rule i`m trying to commit, but thats not working...

/kristian

kristian by L3 Networker
  • 2165 Views
  • 2 replies
  • 0 Likes

Migrate subinterface config to another interface

Hi,

here is a sample of my configuration.

I have trunk link (from a cisco device) to the 1/6 interface, where i configured several subinterfaces.

You can see that we have the 1/6.3 in the Virtual Router vr-recette in the Virtual System Recette.

And after

...

CRF by L1 Bithead
  • 4966 Views
  • 5 replies
  • 0 Likes

Policy Based Forwarding for Application "Ping"

Hello,

i want to make a policy for "Policy Based Forwarding" to route only ping traffic to a different router. Is this possible?

I testet a rule with a service "tcp/udp Port 0" -> Don't work

I tested another rule with an application "icmp" -> Don't work

...

  • 23587 Posts
  • 103 Subscriptions
Top Solution Authors
Top Liked Authors
Labels