This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Allow Ping to Layer3 Sub-Interfaces by default

Hi,I have Palo acting as Layer3 gateway and I would like to always allow clients within the VLAN to Ping their default gateway (i.e. Layer3 Sub-Interfaces on Palo firewall) by default (running in Active/Passive mode). In my case multiple Layer3 Sub-Interfaces are sharing same Zone hence allowing blanket rule to permit ping within Zone may be har...

DCN by • Not applicable
  • 4081 Views
  • 3 replies
  • 0 Likes

Resolved! PaloAlto firewall platform upgrade?

Hi,I'm a customer with two PaloAlto firewalls PA-2020 with active / passive config. We have a 100 Mbps simetrical Internet speed bandwith connectedto the PaloAlto firewalls and all is working fine.Our ISP provider is going to upgrade our Internet speed to 1 Gbps and replacing the Cisco 2951 router to a higher Catalyst one. My question is if we ...

Resolved! Top Source Countries (Foreign) Custom Report

While attempting to create a report that only showed the "TOP Source Countries (Foreign)" I found that it also shows connections from the US... Is there a way to exclude the United States from the report?

bgharris by • L0 Member
  • 4398 Views
  • 3 replies
  • 0 Likes

Resolved! Management inteface send packet port 137 to broadcast public IP

Hi all,I monitor traffic on management interface of 3020, I have seen so many packet from management IP to an broadcast IP Aug 23 14:49:24 192.168.1.15:35889 203.77.255.255:137 UDPAug 23 14:49:24 192.168.1.15:52601 203.77.255.255:137 UDPI try to stop all service on management interface but it is not affect.Please help me to stop th...

Resolved! Traffic report

HiI have few reports that I get every day/week on my email. But I'm looking for traffic report per ingress/egress interface- something like is posssible to generate by hands from Monitor>Reports>Traffic report>Ingress Interface but scheduled and sended on email.I tryed to create custom report and load "Ingress interface" as a template -...

_slv_ by • L4 Transporter
  • 3459 Views
  • 2 replies
  • 0 Likes

Resolved! Audio Issues with Asterisk via PA-2050

I am currently attempting to cut over our office's internal gateway from a BSD firewall to our PA-2050 (running PAN-OS 4.1.9). When attempting the cutover, I can get all services to work properly with the exception of our two VoIP servers (running Trixbox, which is Asterisk-based). I can get the servers to make a call, but once connected there...

Isosat by • L2 Linker
  • 17320 Views
  • 20 replies
  • 2 Likes

Resolved! Captive Portal -- LDAP Authentication Question

Thank you for your time. I have a lab setup with a PA-500 and a Windows 2008 server with Active Directory. I have a single user in the trust zone on the Palo and I am trying to get Captive portal working for User-ID mappings of unknown users. I have my LDAP server profile and I have my user/group mappings working just fine with that, however, wh...

Resolved! Logg file for CRL update

Hi,Does anybody know in which log file I can see that the CRL revoke list is updated?And also if its possible to see that a client is rejected because of revoked certificate not just client cert invalid?/kristian

kristian by • L3 Networker
  • 4786 Views
  • 2 replies
  • 0 Likes

Gotoassist coming up as Unknown-TCP

Hi There,We have a user that is trying to use Gotoassist support with one of our supplier companies. I have created a specific rule that allows for Citrix, web-browsing to the specific websites it needs and gotoassist application itself. However, when it gets to the last step in the connection proccess where it comes up and says "Connecte to GoT...

JRussell by • L3 Networker
  • 5677 Views
  • 5 replies
  • 0 Likes

PAN OS

How can you check to see what PAN OS is installed on your PA 3020?

infotech by • L4 Transporter
  • 3422 Views
  • 3 replies
  • 0 Likes

DNS Proxy

I have configured DNS Proxy on a PA200 with PANOS 4.1.9, with two interfaces enabled for DNS proxy service and two default public DNS as primary and secondary.But on system monitor, on DNS Proxy object, I find: "Failed to resolve domain name: <domain-name > after trying all attempts to name server(s): 8.8.4.4 8.8.8.8 .Which is the source ...

lauro7 by • L0 Member
  • 5034 Views
  • 3 replies
  • 0 Likes

Resolved! Proper Way to allow Split-tunneling

Greetings all! I am trying to allow split-tunneling for a client so they can access their home network while connected via VPN. I see in split-tunneling box, the option to add specific network ranges but hope there is a better way since I could not hope to know all of their home network ranges. I am sure I am missing something.Thanks in advance!

SDorsey by • L4 Transporter
  • 3995 Views
  • 2 replies
  • 0 Likes

Resolved! Applications in PBF

Correct me if I am wrong but I should be able to filter traffic in a rule based on applications, correct? I am trying to create a PBF that will route traffic for one specific IP address using google-docs-base but I can't get this application to show up in the drop down list. It looks like it has a few of the more common applications but not the ...

  • 24431 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks