General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

yeoogh.com

seeing an excessive amount of traffic being tagged Suspicious DNS query (virus.virut:yeoogh.com) canno find any reference to this anywhere, ideas?

Cisco Ironport with Palo Alto FW

We have a tenant who is going to terminate their internet service and begin to use our connection. Their internet traffic will be directed to our Palo Alto, which is our internet gateway. The tenant also uses a Cisco Ironport Web Security device and insists on its continued use vs. using the services on the Palo Alto. My thought was to put th...

High Management CPU

HiSince upgrading a PA-2050 to 5.0.8 I noticed that the management CPU is always above 70% and DataPlane is under 5%. Do this behaviour is normal? Management CPU sometimes goes to 99%.Best regardsGonzalo Arroyo

SOC_CSG by L4 Transporter
  • 4550 Views
  • 4 replies
  • 0 Likes

Script to switch on/off captive portal by script

Hi,I'm still interested in finding a solution to manage my PA500 captive portal feature to switch on and off during certain times of the day. I have heard in another setting that one can switch captive portal on and off from a script. Which commands would such a script include for a safe and 'best practice' enabling and disabling of CP?Once be...

Resolved! Can the number of profiles supported be increased by license?

Hi,We have a PA-FW PA-3020. I checked the parameter: cfg.general.max-profile and its value = 100. Means that only 100 profiles can be created on the device. Can we increase this limit by going for a higher license? or is this model dependent and we have to upgrade to a higher model like PA-5060.What is the maximum limit of URL profiles supported...

Resolved! Mask Security Policy User Field?

Is it possible to mask or obfuscate the 'User' field of a security policy rule? I am testing monitoring user url activity, but I don't want other firewall admins to know who I am monitoring.Mike

mike_cc by Not applicable
  • 3610 Views
  • 4 replies
  • 0 Likes

Alert at unauthorized DHCP server activity..

Hi,It happens from time to time that students succeeds to connect a private router to our dorms network and it starts to propose leases that lead nowhere to our clients.I wonder if my PA500 box can be configured to alert us if it discovers such DHCP lease proposals from other sources than our authorized DHCP servers?Thanks for comments on this.r...

Resolved! Threat,virus Log

Oct 27 23:00:32 10.208.35.87 Oct 27 22:57:23 PA-VM 1,2013/10/27 22:57:22,007000001148,THREAT,virus,1,2013/10/27 22:57:22,192.168.1.73,192.168.2.71,0.0.0.0,0.0.0.0,Test,,,ftp,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,Log Forwarding,2013/10/27 22:57:22,9906,1,49497,53510,0,0,0x80000000,tcp,deny,"eicar.com",100000(100000),any,medium,server-to-cli...

NHorsch by L1 Bithead
  • 3463 Views
  • 3 replies
  • 0 Likes

Resolved! Tracking Youtube activity

We have a user that is uploading a great deal of traffic to youtube.How can I drive down into the logs to find the user's account info, youtube channel name, or the URL where the content got uploaded to.thanksPaul

pleroux by Not applicable
  • 3837 Views
  • 2 replies
  • 0 Likes

Troubleshooting HA Sync

Hi All,I've a HA Active/Active pair of PA-3020's managed via Panorama.All was well until I had to replace one of the pair, I brought the new device into Panorama, added it to the correct group/templates and then finished the device config (IP addresses etc).The last step was to configure it as part of the HA.However the two systems are failing t...

pcook by L1 Bithead
  • 13421 Views
  • 7 replies
  • 0 Likes

Resolved! Same object different details

We've a number of firewalls managed via Panorama.A number of those filewalls will have the same policy, except that the source or destination address will change depending where the firewall is deployed.For example a rule to allow the remote sites (onside of the firewall) access to an intranet within the main site would always have the same dest...

pcook by L1 Bithead
  • 6883 Views
  • 6 replies
  • 0 Likes
  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
Labels