General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1361 Views
  • 0 replies
  • 0 Likes

User-ID agent collecting non-domain user-ip mappings

User-ID agent version 5.0.6-6 seems to collect non-domain user to ip mappings.

In fact this is a laptop that is a member of our domain, but I'm logging on with a local administrator. User-ID agent collects it and maps the ip to "hostname\administrator

...

dieter_b by L4 Transporter
  • 4497 Views
  • 8 replies
  • 0 Likes

Resolved! multiple ip address affected to interface Layer 3

Hello

somebody know why

If I want to affect 2 Ip address to one interface in the same subnet like ip1: 12.52.36.2/29 and ip2 : 12.52.36.3/29

the result is an overlaping of subnet.

and to solve that I have to add the first ip 1 as 12.52.36.2/29 and the

...

Gregoux by L4 Transporter
  • 2599 Views
  • 1 replies
  • 0 Likes

Resolved! How to route youtube traffic towards DSL link

Hello everyone!

We installed a DSL link in our company and we would like to forward all streaming video traffic towards that link, offloading our main corporate internet link.

I saw some docs concerning PBF, but I see that there is not a big list of ap

...

Resolved! Facebook and SSL Decryption

Hi Everyone,

I am in the process of evaluating PA.  Love the product so far.  I have a question.  I am working on the App Control.  On the Facebook App I can block/drop the entire page but can't stop the subcategories (chat, posting, etc..).  I found

...

dhopper82 by Not applicable
  • 3227 Views
  • 2 replies
  • 0 Likes

Resolved! Multiple IP address affected to L3 interface

Hello All

Somebody know why

When You add 2 ip address from the same subnet to the same interface Layer 3 ex ;

ip 1 : 12.52.36.2/29

ip 2: 12.52.36.3/29

you obtain an error lijke subnet overlaping

to solve that you need to declare one IP in the subnet /29

...

Gregoux by L4 Transporter
  • 9609 Views
  • 3 replies
  • 0 Likes

MigrationTool


Hi,

i am new in town. I am trying to convert a Cisco PIX to PA sintax usin the MigrationToolVM.1.5 (i only have a 32-bit cpu) and i am not abe to create the XML file.

Checking Hosts integrity. Looking for hosts with an invalid netmaskName: Gestor Mask:...

gbarrios by Not applicable
  • 1994 Views
  • 1 replies
  • 0 Likes

Resolved! FTP Data connection broken, need help

ta, Im having a heck of a problem.

One zone out to an ftp server is working frie but from another zone the conputers can connect but they cant get file listings of xfer data ata ll. Routing is fine, obviously, the rules they are hitting is ok, NAT and

...

choff123 by L3 Networker
  • 15101 Views
  • 14 replies
  • 3 Likes

Dynamic Objects Error

I’m trying to test using dynamic objects on 5.0 however I’m not sure If I’m missing something?

The document suggests the syntax to add a new entry do a dynamic address object is as follows:

https://<IP>/api/?type=user-id&action=set&key=<KEY>=&file-name

...

rds by L2 Linker
  • 3329 Views
  • 2 replies
  • 0 Likes

Resolved! Question about logging and Panorama

Is it possible to have both a Panorama server receiving logs from the gateways AND a syslog server receiving them at the same time? Any examples?

I also believe I heard that there is potential to have the feature in an upcoming rev of Panorama forward

...

Resolved! migration tool

using the latest version of the fw migration tool,  can anyone share how to delete the database files?

Doing an ASA to PAN migration when creating the XML file,  the  migration tool does configuration check, looks for host with invalid masks.

Tool foun

...

msamoska by L1 Bithead
  • 4761 Views
  • 5 replies
  • 0 Likes

Chromebook VPN

I have the need to establish VPN connections from Chromebooks.  My initial research is not real promising,  So far I have determined:

1) There is no GP Client for the Chromebook.

2) The Chromebook only  supports:

  • L2TP over IPsec with PSK
  • L2TP over IPsec
...

tjcarter by L1 Bithead
  • 3081 Views
  • 1 replies
  • 0 Likes

Assign static IP through LDAP for GlobalProtect Client

Hello,

For Cisco ASA, I can configure fixed IP address for SSL VPN user by using LDAP attribute "msRADIUSFrameIPAddress IETF-Radius-Framed-IP-Address ".

(SSL VPN is authenticated by AD window 2008).

Now, I'm using PAN and I don't know how to configure a

...

ThongPD by L1 Bithead
  • 5515 Views
  • 8 replies
  • 0 Likes

Setup Alert for Traffic to Specific IPs

We are trying to figure out if there is a way to have the firewall create an alert in the logs when traffic hits a specific IP range. We don't want to block access to this range of IP addresses but we want to be able to confirm if users are conversin

...

  • 24184 Posts
  • 117 Subscriptions
Top Solution Authors
Top Liked Authors
Labels