This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

IPSEC Pass Through

Forgive the newbie question, but I've been searching the documentation and I don't see where I can configure the Paloalto FW for vpn passthrough, specifically ESP (Protocol 50) and even ICMP. I have some routers that I need to provide NAT for their external address, but I also want to limit the services available on the Internet to just PING re...

jpvh1234 by • L0 Member
  • 9069 Views
  • 4 replies
  • 0 Likes

Decryption problem with 5.0.7

Hi,since we've upgraded our PAs (200, 2000), we notice more and more decryption problems with HTTPS websites. The problem appears suddenly, almost all HTTPS doesn't work and a restart of the PA is required to solve the problem...And then, after one or more days it appears again...We decided to downgrade our PAs back to 5.0.6...Did someone also n...

Hithead by • L4 Transporter
  • 4485 Views
  • 4 replies
  • 0 Likes

vpn clients for android and linux

hiis there any good alternatives out there for connecting linux and android clients to global connect\PA native IPsec vpn ??And I DO NOT mean that native cisco is OK, the encryption used here has been broken for several years,and are not designed for either linux or android, and in many cases it does not function well

knutelde by • Not applicable
  • 9284 Views
  • 7 replies
  • 0 Likes

Resolved! Custom Report limitation - 500 Rows

I am trying to pull a report using 'Custom Report', when i run the report the maximum number of rows it supports is 500, is there any query or a way to increase this number?

Abrar by • Not applicable
  • 3477 Views
  • 1 replies
  • 0 Likes

I am currently having an issue with captive portal and IE8.

Symptoms: when a user logs in on an XP or Win 7 machine with IE 8 (Generic Windows login) and opens IE they will get "Page cannot be displayed" for any website. This is not a standard PA "Webpage blocked" message just the standard "Page cannot be displayed". If you click refresh 7,8,9 times (no set pattern) eventually you will get the Captive ...

jdecker by • Not applicable
  • 5447 Views
  • 6 replies
  • 0 Likes

High Management CPU usage

I have noticed that one my PA 2020 boxes constantly has a very high Management CPU usage. Like now for instance where nobody apart from myself is logged onto it and I am not doing anything apart from just sitting on the dashboard, with my refresh set to manual as well, and the management CPU is sitting at 47%. During the daytime when 1 other Adm...

'Invalid device' when trying to load a config backed up to Panorama

HiI am managing several devices to 3 different Panorama appliances (3 physically separate networks)I have configured all of the Firewalls (running 5.0.4 and 5.0.6) with their Panorama settings and can see them in Panorama/Managed Devices. The details such as software version and Apps and threat version are showing so I know they are talking t...

scooby59 by • Not applicable
  • 3688 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama - missing context drop-down

Problem statement: The Panorama 'context' drop-down disappears. We're then stuck in whatever context we were last in.Occurrence: Too many times (8 times in the last 1/2 day)Work around: Close/open Chrome, reconnect to Panorama.Contextual info: We use Panorama v 5.1.0. Our various firewalls (managed devices) are at 5.0.5. We use Chrome browsers ...

tommyluke by • Not applicable
  • 6098 Views
  • 5 replies
  • 0 Likes

Problem with new internet connection

I've just changed my internet connection to a new one.Now I've reconfigured everything with the new address.The issue is that I can surf the web from inside to outside but the NAT to my internal server is someway blocked.What I can see in logs is:I really don't know how to solve this issue.The routing table is correct, but it seems that somethin...

Resolved! VPN tunnel moving from Palto-ASA to Palto-Palto

I'm running PANOS 4.0.x and have a tunnel with a Cisco ASA peer. I had to create multiple IPSEC tunnels to work around the Proxy ID limitation of 10 per tunnel interface. This Cisco peer will be moving to a Palo Alto box running 5.0.x. If the far end Palto running 5.0.x just matches my Proxy ID's, then I should be good correct? And that 5.0....

iguarino by • L0 Member
  • 3721 Views
  • 3 replies
  • 0 Likes

LDAP and GlobalProtect

Hi,I am trying to set up Globalprotect.Would like to restrict the user to a group, but I can not get this to work.In Authentication profile i have the VPN-group in allow list.When I logon with a user in this group the log tell me that i have incorrect username or password.Have also included the group under "group mapping setting".Have tried the ...

klumpen by • L1 Bithead
  • 5151 Views
  • 3 replies
  • 0 Likes

Wildfire - URL Truncated

Hi, it seems that the URL in WildFire Report Details is truncated. Would like to know this is as per design or a bug? We would like to download the malware to submit to our AV vendor for signature.

Chang by • Not applicable
  • 5268 Views
  • 7 replies
  • 0 Likes

SSL VPN with Global Protect Agent 1.2.0 on different port

Hello there,on a PA-500 we're running our Global Protect portal and gateway on port 8443 according to https://live.paloaltonetworks.com/docs/DOC-3457 .This worked well up to agent version 1.7.0. Since version 1.2.0 the agent ignores to port configuration and always tries to connect to port 443.I've seen numerous log entries on the webserver runn...

  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks