General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! QoS Egress Max 0 = unlimited?

The default setting when creating a new QoS interface for Egress Max is 0. Does 0 mean unlimited or 0 (no bandwidth, no traffic)?Mike

mike_cc by Not applicable
  • 8387 Views
  • 3 replies
  • 0 Likes

Content version 390

Hello All, In content version 390, the ssl traffic is mis-categorized as private-ip-address as a result, this content version is pulled back. The devices which have already seen the content version 390 will try and install it even if you have reverted to previous content version. The devices which have not seen the content version 390 are ...

tshiv by L4 Transporter
  • 1873 Views
  • 1 replies
  • 0 Likes

vpn-ssl Global Protect

helloMy problem is that when a user connects to the overall ssl vpn-protect this lifetime login settings in 1 day and the settings I have for inactivity logout is 3 hours and although the user activity during those three hours it off after that time is not respecting the settings that. I can do about it?

itstrap by Not applicable
  • 3173 Views
  • 2 replies
  • 0 Likes

Resolved! Session Timeouts

So my question is pretty simple.How are timeouts handled on these devices. Does it matter if I have rules based on services vs. applications?We have our global settings on the box set for TCP 3600. We have rules that are service based and ones that are application based. When the firewall identifies the application is seems like it defaults t...

smccall by Not applicable
  • 5243 Views
  • 4 replies
  • 0 Likes

Use x-forwarded- for to apply policy?

Dear all,I have a very important question and need your fast reply please.Can I use x-forwarded-for to show the ip address of the coming users behind a proxy and THEN apply policies based on these users?This scenario intends to apply policies per users while reaching the Firewall with the ip of a proxy. Can I?

gshaker by L1 Bithead
  • 3537 Views
  • 3 replies
  • 0 Likes

Resolved! Webbrowsing on non-standard http ports....

What is the best way for me to implement a rule that allows http traffic over non standard ports?Our security standards require that we use a feature similar to what is available in Checkpoint that allows us to lock the port down based on protocol. Ex: port 55000 is open and allowed assuming the traffic is http or https.Any help would be appreci...

smccall by Not applicable
  • 5288 Views
  • 3 replies
  • 0 Likes

Resolved! Duplicate Syslog Messages

Hi. We're running 4.1.9 on our firewalls and have an issue where all Syslog logging is being duplicated.I've seen an old bug fix report saying that 4.1 fixed an issues with some Config messages being duplicated, but was wondering if there is a known issue with 4.1.9 duplicating messages?I'm going through the config at the moment to see if I can...

apackard by L4 Transporter
  • 5348 Views
  • 3 replies
  • 0 Likes

Resolved! GlobalProtect SSL VPN User Access Filtering

Hello, I am fairly new to the Palo Alto firewalls so I figured I would pose a question to everyone while I continue my own research into the issue. Basically, in our test setup we have SSL VPN set up so that everyone in the office can authenticate via AD and access servers and resources through the tunnel. We want to be able to segregate this in...

Resolved! Panorama 32-bit/64-bit

I was just wondering if there is a 64-bit version of Panorama to run on a virtual machine? Right now we are running a 32-bit version and would really like to increase the RAM. We are limited to how much memory we can add since the VM recognizes Panorama as "Other Linux (32-bit)".

Resolved! Download GlobalProtect for Testing

I cannot see a way to download the GlobalProtect client for Mac and Windows, without activating it for the entire environment. I would like to download the latest version to a client for testing before release. How do I do this without activating it for everyone?

  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
Labels