General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Updating URL filtering

Hi,I have two firewall in which URL filtering is not syncronizing. In the FW1 active i have the URL filtering version 4188, but in the FW2 passive i have the version 0. The interface for URL updates is the untrust (in services routers) so the only FW can access to brightcloud is the active (FW1).where can i download the URL filtering v4188 to in...

There are sessions from captive-portal zone to captive-portal zone on session browser.

Hello,My customer is installing video conference hardware.The video and voice traffics are normal from internal to external (internet). This mean is Internal user call external user.But Internal user doesn't see external user video when external user call internal user.I had checked NAT rules and security policy rules. It is no problem.So I did...

Query concerning attaching a wifi AP to a PA firewall

Hi,I wonder if somebody can help me with a query I have. We plan to setup a PA firewall (200) at one of our remote sites. We want to give them the ability to have guest wifi access throught the PA. Is it possible to connect an AP directly to the ethernet ports of the PA? If so, has anybody any experience of doing this and what hardware ...

phild by Not applicable
  • 2635 Views
  • 1 replies
  • 0 Likes

Resolved! Is it possible for PaloAlto to read the client IP address or User name from HTTP header (when using proxy server)?

Hi All,In our network scenario we have the Bluecoat proxy before PaloAlto, as all the users are authenticated to proxy ( in which we have user based policies) we are able to see only proxy IP address in logs and because of this we are not able to do user identification and control the traffic based on user.But in our proxy we have the option to ...

Gururaj by L4 Transporter
  • 8577 Views
  • 5 replies
  • 0 Likes

PA-500 - Replacement is not acting the same as old one

Here is our scenario.....please keep in mind I'm not a network personWe have two PA-500s. They used to be in HA but we had taken one out for a different purpose early last year so we were running in stand alone.The PA-500 worked great but we started having random crashes. So we rushed to put the secondary back in and put it into HA mode while ...

Search for hosts/IPs across entire PA environment

What is the most effective method for searching for usage of a hostname or IP address across our entire PA environment?The goal is to be able to identify and delete objects and rules that have been created in our firewalls that correspond to hosts/IPs that have been retired from our environment. We get notified of those retirements, so I'd like ...

gwhyte by Not applicable
  • 7581 Views
  • 6 replies
  • 0 Likes

Resolved! SNMP - partial monitoring (monitoring restricted)

Hi,I would like to know if it is possible to create an SNMP community and restrict access so it can monitor ONLY ONE interface of the firewall Palo Alto. Should not be able to monitor eg CPU utilization and memory firewall.tks, Paulo Aun

Thiago by L3 Networker
  • 3668 Views
  • 1 replies
  • 0 Likes

PA Software Update Notifications

I'm looking for a page somewhere that has the expected release dates for upcoming Palo Alto software updates. Does such a thing exist? I've looked around the site and can't find anything. We are planning on upgrading our firewalls to 5.1 but we can't find the expected release date.

User ID methods?

I am curious how many folks are now using the ID agent that is built into the PA as opposed to the agent that is installed in a windows client?I tried migrating to the built in agent but it seemed to cause excessive CPU usage on my DCs.Thanks,Bob

BobW by L4 Transporter
  • 2645 Views
  • 2 replies
  • 1 Likes

DHCP Relay and virtual routers

Hi,I have a PA500 configured with 2 virtual routersIn both virtual routers I have some zone, interfaces and networks.For example:VR1- Zone1: Network Ethernet1/1.1 - Interface Type Layer3 - Tag 1 - IP 10.168.100.1 / 16- Zone2: Network Ethernet1/1.2 - Interface Type Layer3 - Tag 2 - IP 192.168.50.1 / 24VR2- Zone3: Network Ethernet1/2.1 - Interface...

diennea by L3 Networker
  • 9060 Views
  • 9 replies
  • 0 Likes
  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
Labels