This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Can the number of profiles supported be increased by license?

Hi,We have a PA-FW PA-3020. I checked the parameter: cfg.general.max-profile and its value = 100. Means that only 100 profiles can be created on the device. Can we increase this limit by going for a higher license? or is this model dependent and we have to upgrade to a higher model like PA-5060.What is the maximum limit of URL profiles supported...

Resolved! Mask Security Policy User Field?

Is it possible to mask or obfuscate the 'User' field of a security policy rule? I am testing monitoring user url activity, but I don't want other firewall admins to know who I am monitoring.Mike

mike_cc by • Not applicable
  • 3584 Views
  • 4 replies
  • 0 Likes

Alert at unauthorized DHCP server activity..

Hi,It happens from time to time that students succeeds to connect a private router to our dorms network and it starts to propose leases that lead nowhere to our clients.I wonder if my PA500 box can be configured to alert us if it discovers such DHCP lease proposals from other sources than our authorized DHCP servers?Thanks for comments on this.r...

Resolved! Threat,virus Log

Oct 27 23:00:32 10.208.35.87 Oct 27 22:57:23 PA-VM 1,2013/10/27 22:57:22,007000001148,THREAT,virus,1,2013/10/27 22:57:22,192.168.1.73,192.168.2.71,0.0.0.0,0.0.0.0,Test,,,ftp,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,Log Forwarding,2013/10/27 22:57:22,9906,1,49497,53510,0,0,0x80000000,tcp,deny,"eicar.com",100000(100000),any,medium,server-to-cli...

NHorsch by • L1 Bithead
  • 3430 Views
  • 3 replies
  • 0 Likes

Resolved! Tracking Youtube activity

We have a user that is uploading a great deal of traffic to youtube.How can I drive down into the logs to find the user's account info, youtube channel name, or the URL where the content got uploaded to.thanksPaul

pleroux by • Not applicable
  • 3819 Views
  • 2 replies
  • 0 Likes

Troubleshooting HA Sync

Hi All,I've a HA Active/Active pair of PA-3020's managed via Panorama.All was well until I had to replace one of the pair, I brought the new device into Panorama, added it to the correct group/templates and then finished the device config (IP addresses etc).The last step was to configure it as part of the HA.However the two systems are failing t...

pcook by • L1 Bithead
  • 13317 Views
  • 7 replies
  • 0 Likes

Resolved! Same object different details

We've a number of firewalls managed via Panorama.A number of those filewalls will have the same policy, except that the source or destination address will change depending where the firewall is deployed.For example a rule to allow the remote sites (onside of the firewall) access to an intranet within the main site would always have the same dest...

pcook by • L1 Bithead
  • 6825 Views
  • 6 replies
  • 0 Likes

DNS service route doesn't work ?

Hi,I am having troubles configuring dns service route for DNS.DNS servers are behind tagged internal interface of PA-2050 device.I was able to configure that for syslog and it sends all the traffic PA outbound to the server.I was trying to do the same with DNS, but when I do, PA stops sending queries either through management interface or throug...

Resolved! Forwarding with ICAP

Is the Palo Alto Panorama able to forwarding using ICAP protocol to an code green. I was unable to find any document in the KB on if it is possible.

Resolved! IPSec tunnel as backup link of MPLS connection

Hi,we have MPLS link between two sites. Right now I want to setup backup link with IPSec tunnel. schema of network connection is as on picture.please help me to configure Palo Alto device to monitor MPLS link and switch to IPSec tunnel when MPLS link will be down.Switch on right site has IPSLA ready that check connection to MPLS router and chang...

Resolved! Email notification for many people

Hi,one simple question: can i send email notifications for more then two people? Because settings are "to" and "Additional Recipient". If answer is yes, how i can do so? Maybe i must add one more email server? Thank you.

Interface by • L3 Networker
  • 8177 Views
  • 7 replies
  • 0 Likes

USER ID MAPPING

What will give you better results, User-ID Agents installed on domain controllers, or Server Monitoring from the firewall (agentless)?

almay by • L2 Linker
  • 5324 Views
  • 7 replies
  • 0 Likes

Resolved! NAT sessions

Hello All,Is anyone know how to see or debug nat translations on PAN device, similar like "sh ip nat translation" on cisco devices?Txs...

Tician by • L3 Networker
  • 33967 Views
  • 4 replies
  • 1 Likes

Certificate trust error after updating Global protect client

Folks.I've finally managed to get approval to push out an update to the latest Global Protect client, but now when we connect, we get a certificate trust error. We are using a self-signed certificate for the portal.I've applied the fix suggested in this Trusted root CA on Global Protect Portal post - but it hasn't helped.Can anyone suggest other...

darren_g by • L4 Transporter
  • 4043 Views
  • 4 replies
  • 0 Likes
  • 24394 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks