General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 405 Views
  • 0 replies
  • 2 Likes

Resolved! GlobalProtect 1.2.2 disabled Windows auto-login

We are rolling out the GlobalProtect client to our campus community and we came across this behavior.  When we install the GlobalProtect client, it disables the auto-login feature for some of our Windows machines.  This is a non-issue for me, but som

...

mcw015 by Not applicable
  • 3721 Views
  • 1 replies
  • 0 Likes

Resolved! url filtering speed

Hi,

When enable url filtering page loads late.Same page loads very quickly when disable url filter.

All sites same issue.any idea about that ?

panos by L6 Presenter
  • 4563 Views
  • 10 replies
  • 0 Likes

What is 'cotp' ?

Hi,

-----------------------------------------------------------------------

A new 'cotp' App-ID will be available in the upcoming content update for the ISO transport protocol 8073 over TCP. When allowing applications such as ms-rdp, t.120, and iccp, t

...

komure by Not applicable
  • 17550 Views
  • 2 replies
  • 0 Likes

Resolved! How to create custom response pages

Hello,

I know that the Device -> Response pages menu allows to modify response page, but how can I add my own response page ?

What I would like to do is displaying an advertisement page when traffic is blocked during working hours (using schedules).

Is

...

ldormond by L3 Networker
  • 5119 Views
  • 6 replies
  • 0 Likes

Inbound NAT with DHCP

Hi,

Is it possible to do a inbound NAT when the outside/untrust interface is a DHCP client?

Here is the NAT rule i`m trying to commit, but thats not working...

/kristian

kristian by L3 Networker
  • 2235 Views
  • 2 replies
  • 0 Likes

Migrate subinterface config to another interface

Hi,

here is a sample of my configuration.

I have trunk link (from a cisco device) to the 1/6 interface, where i configured several subinterfaces.

You can see that we have the 1/6.3 in the Virtual Router vr-recette in the Virtual System Recette.

And after

...

CRF by L1 Bithead
  • 5237 Views
  • 5 replies
  • 0 Likes

Policy Based Forwarding for Application "Ping"

Hello,

i want to make a policy for "Policy Based Forwarding" to route only ping traffic to a different router. Is this possible?

I testet a rule with a service "tcp/udp Port 0" -> Don't work

I tested another rule with an application "icmp" -> Don't work

...

Resolved! When not to use agentless user-id ?

Hi,

For big environments it is advised to use user-id agent.How will we be sure ?

is there a comparison for this.User number, DC number , ??? any number ? etc...

When we should install agent software ?

Thanks.

panos by L6 Presenter
  • 2975 Views
  • 4 replies
  • 0 Likes

Restricting Application Port

I would like to create a custom App for SMTP submission. All I really want to do is restrict the "smtp" App to use 587/tcp only. It's usual "default ports" action is to allow 25/tcp or 587/tcp.

I just tried to create a Custom App based on "smtp," but

...

cosx by L2 Linker
  • 2979 Views
  • 2 replies
  • 0 Likes

Resolved! Split internal and external DNS lookups

I am wanting to split internal and external DNS lookups on my PAN appliance to cut down on some traffic hitting our internal DNS servers.  I think I can use a DNS Proxy to specify where the resolution occurs and what interface.  Does anyone have expe

...

nthen by L3 Networker
  • 3881 Views
  • 3 replies
  • 0 Likes

Resolved! System Alert:Failure to check wildfire content upgrade

In last two days, I started getting system alerts that says "SYSTEM ALERT : high : Failed to check WildFire content upgrade info due to generic communication error" and another that says "SYSTEM ALERT : high : HA Group 1: Anti-Virus version does not

...

awarsame by L1 Bithead
  • 7492 Views
  • 5 replies
  • 0 Likes

Resolved! zabbix

Hi,

anyone has a document configuring an already installed Zabbix snmp for PaloAlto device ?

Thanks.

panos by L6 Presenter
  • 8285 Views
  • 11 replies
  • 0 Likes

Delete Antivirus Dynamic Update

Hello,

I tried threats & antivirus license on a PA 4020.

My license was end, so I deleted it using CLI -> works fine

But how to delete antivirus dynamic update package ?? I can't by using web, I tried with CLI : delete anti-virus update (but the pack is

...

  • 23695 Posts
  • 110 Subscriptions
Top Solution Authors
Labels