General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4223 Views
  • 0 replies
  • 0 Likes

There are sessions from captive-portal zone to captive-portal zone on session browser.

Hello,My customer is installing video conference hardware.The video and voice traffics are normal from internal to external (internet). This mean is Internal user call external user.But Internal user doesn't see external user video when external user call internal user.I had checked NAT rules and security policy rules. It is no problem.So I did...

Query concerning attaching a wifi AP to a PA firewall

Hi,I wonder if somebody can help me with a query I have. We plan to setup a PA firewall (200) at one of our remote sites. We want to give them the ability to have guest wifi access throught the PA. Is it possible to connect an AP directly to the ethernet ports of the PA? If so, has anybody any experience of doing this and what hardware ...

phild by Not applicable
  • 2528 Views
  • 1 replies
  • 0 Likes

Resolved! Is it possible for PaloAlto to read the client IP address or User name from HTTP header (when using proxy server)?

Hi All,In our network scenario we have the Bluecoat proxy before PaloAlto, as all the users are authenticated to proxy ( in which we have user based policies) we are able to see only proxy IP address in logs and because of this we are not able to do user identification and control the traffic based on user.But in our proxy we have the option to ...

Gururaj by L4 Transporter
  • 8295 Views
  • 5 replies
  • 0 Likes

PA-500 - Replacement is not acting the same as old one

Here is our scenario.....please keep in mind I'm not a network personWe have two PA-500s. They used to be in HA but we had taken one out for a different purpose early last year so we were running in stand alone.The PA-500 worked great but we started having random crashes. So we rushed to put the secondary back in and put it into HA mode while ...

Search for hosts/IPs across entire PA environment

What is the most effective method for searching for usage of a hostname or IP address across our entire PA environment?The goal is to be able to identify and delete objects and rules that have been created in our firewalls that correspond to hosts/IPs that have been retired from our environment. We get notified of those retirements, so I'd like ...

gwhyte by Not applicable
  • 7148 Views
  • 6 replies
  • 0 Likes

Resolved! SNMP - partial monitoring (monitoring restricted)

Hi,I would like to know if it is possible to create an SNMP community and restrict access so it can monitor ONLY ONE interface of the firewall Palo Alto. Should not be able to monitor eg CPU utilization and memory firewall.tks, Paulo Aun

Thiago by L3 Networker
  • 3556 Views
  • 1 replies
  • 0 Likes

PA Software Update Notifications

I'm looking for a page somewhere that has the expected release dates for upcoming Palo Alto software updates. Does such a thing exist? I've looked around the site and can't find anything. We are planning on upgrading our firewalls to 5.1 but we can't find the expected release date.

User ID methods?

I am curious how many folks are now using the ID agent that is built into the PA as opposed to the agent that is installed in a windows client?I tried migrating to the built in agent but it seemed to cause excessive CPU usage on my DCs.Thanks,Bob

BobW by L4 Transporter
  • 2584 Views
  • 2 replies
  • 1 Likes

DHCP Relay and virtual routers

Hi,I have a PA500 configured with 2 virtual routersIn both virtual routers I have some zone, interfaces and networks.For example:VR1- Zone1: Network Ethernet1/1.1 - Interface Type Layer3 - Tag 1 - IP 10.168.100.1 / 16- Zone2: Network Ethernet1/1.2 - Interface Type Layer3 - Tag 2 - IP 192.168.50.1 / 24VR2- Zone3: Network Ethernet1/2.1 - Interface...

diennea by L3 Networker
  • 8736 Views
  • 9 replies
  • 0 Likes
  • 24355 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels