General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 1010 Views
  • 1 replies
  • 9 Likes

Resolved! PA-2050 and Juniper SRX reth config

There some problems with connection user to Juniper SRX through PA-2050.

The exercise is to make L2 connection between Wifi user to Juniper SRX through Palo Alto.

Please give some advice to make this configuration in Palo Alto.

I have no many experience

...

Ulugbekyu by Not applicable
  • 2040 Views
  • 2 replies
  • 0 Likes

Resolved! Could IPsecVPN use PBF instead of routing?

Hello guys.

I have a question about IPSEC VPN tunnel and is IPSEC VPN can use PBF instead of routing or not.

I think that tunnel interface could have ip-address (for tunnel monitoring) so I guess IPSEC VPN tunnel could use PBF instead of routing?!

So I

...

ttongfly by L3 Networker
  • 2979 Views
  • 4 replies
  • 0 Likes

Layer 7 protection with custom service (port)?

I'm having a discussion with my firewall engineer about rules in the PA5020.  If I define an application to be used, say SSL, and I want to run that on a random port, say 8443.  When I define that port (service) 8443 and choose the Application 'ssl',

...

Resolved! Migrating OSPF to the Palo Alto

Hello. I am working on the initial configuration of our new palo alto's. These are not in production yet. These new firewalls will be taking over our vlan's (will be the gateway) and will be running OSPF. I will stop the ospf instance on the local ro

...

ldavie by L2 Linker
  • 3389 Views
  • 3 replies
  • 0 Likes

Resolved! Adding domain to username for user identification

Hello

We are using RSA for user authentication with Global Protect.

We need to identify the LDAP group (Windows Active Directory) the user belongs to, but It doesn't work.

The reason is that the user we use for authentication doesn't include the domain

...

GlobalProtect auth with certificate, Safenet eToken

Hi,

For a PCI client, we are looking to get a (very) strong auth for a VPN connection with GlobalProtect, using certificate.

We use Safenet eToken for the repository of the cert (which is CAPI compliant on windows).

We want to use only cert generated by

...

rmenegon by Not applicable
  • 1746 Views
  • 0 replies
  • 0 Likes

iOS device "network errors" when SSL Decryption is turned on

Regarding SSL Decryption:

I originally put the whole category of "social-networking" under a Decrypt rule (mainly to decrypt Facebook to block Facebook games).  However, when I tested on my iPhone after that, LinkedIn, Twitter and Facebook all had "ne

...

uscit by Not applicable
  • 1970 Views
  • 2 replies
  • 0 Likes

GlobalProtect VPN with Windows-PKI (W2K8R2)

Hi

Currently we have a beta-environment for GlobalProtect-VPN on Windows7 (64bit).

Authentication with LDAP works fine.

But we want to use a client-certificate (user) from our internal Windows-PKI which is already rolled out to the endpoints.

Where can i

...

Resolved! OpenVPN

Hi,

Since application version 370 released, I have some trouble with openvpn :

Openvpn udp on port 443 didn't work anymore

Openvpn udp on port 1194 works

Maybe there is a bug on the new application version. Openvpn not on the default port didn't be recon

...

Policy Based Forwarding

We have a branch in a different state to which we have a DS3 MPLS circuit. We and our  branch office have there own ISP connections for Internet access. I would like to have redundancy build between both of our companies through IPSec VPN tunnel in t

...

how to clear TCP options using Palo Alto firewalls?

At the moment we are replacing our Cisco ASA firewalls with Palo Alto firewalls and one thing we cannot still figure out is how to make the Palo Alto firewalls to clear the TCP options on TCP sessions. This can be done, in Cisco ASA firewalls, using

...

netexgb by L1 Bithead
  • 3333 Views
  • 8 replies
  • 0 Likes

Resolved! L2 "switch" ports?

Hi All,

Am I right in saying if I configure a selection of interfaces (in this case on a 3020) as L2, and then assign them to a VLAN with a L3 VLAN interface all those ports will sort-of act like a switch (or more likely a hub)?

A bit like the handful

...

Dpeters1 by L2 Linker
  • 2267 Views
  • 2 replies
  • 0 Likes
Top Liked Authors