This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Skype false positive

Hello guys,About skype: how to know, when users realy use skype and when PA detects only false positive? Because now i have lot of log with "secure.skype.com" URL and PA detects it as skype application.. I would be grateful for an explanation.

Interface by • L3 Networker
  • 6831 Views
  • 10 replies
  • 0 Likes

Resolved! Product Support

Hello,I'm wondering what 3rd parties offer support for PA?In addition, what does it cost to get direct support from PA as opposed to a third party?Thanks,Chris

grkchr by • Not applicable
  • 3216 Views
  • 3 replies
  • 0 Likes

Resolved! Global Protect for ios/android

Hi,What are the reasons to use Global Protect Gateway license (for software at markets) instead of Xauth for ios/android ?Can someone tell all of them?Thanks.

Resolved! VM-Series-L2 firewall configuration?

Hi,does anyone have VM series configured like L2 firewall (intra-host communication) and well working?My interface ethernet1/4 is configured like L2 and have leg to portgroup (vlan xx) glued to zone abcd....Polices was created in way to deny SSH between zones abcd to abcd and allow other traffic, but SSH pass anyway from one guest vm to another ...

Tician by • L3 Networker
  • 7847 Views
  • 6 replies
  • 0 Likes

Cisco Systems VPN Adapter

Hi,I see there is now support for Cisco Systems VPN Adaper however I am trying to figure out what exactly is supported am I now able to connect to the firewall via cisco IPSEC VPN from the Cisco VPN Client software or is this support for something else?I ask as we have engineers that connect to many sites and global rotect is not geared this way...

bcsgroup by • L2 Linker
  • 12948 Views
  • 16 replies
  • 0 Likes

PA-200 SAP router dropping tunnel

We have a PA-200 (running OS 5.0.4) being used as an SAP router. NAT translating between an inside 17.20.x.x address and an outside static global address (IP = a.b.c.d) which pushes all traffic to its VPN peer IP e.f.g.h. When a completely new session is initiated all goes well with phase 1 (time = x) and phase 2 (time = 6x) being accepted. Howe...

PeterG by • Not applicable
  • 2667 Views
  • 1 replies
  • 0 Likes

Resolved! Sharepoint Zone/ Policies

We are in the planning of creating a SharePoint Zone on the PAN. The PAN is our perimeter Firewall. Currently we use a proxy to do URL rewrite, but our SharePoint deployment is all internal. We have extensive ACLs in place for access to SharePoint and from the SharePoint server to the rest of our network. We will be dividing our SharePoint to ...

craymond by • L4 Transporter
  • 4711 Views
  • 3 replies
  • 0 Likes

Troubleshooting device with orange status light

Greetings all!I have a pan200 with an orange status light. Power, fan and temp are all green. Status stays this way through reboots and the web server on the mgmt port is not responding.If I console in, the only issues I have seen so far are the TP licenses just expired. I would love some pointers are troubleshooting commands to run to figure ou...

SDorsey by • L4 Transporter
  • 28493 Views
  • 10 replies
  • 0 Likes

Reports on QoS?

Is it possible to build reports for QoS? I don't see any values that make sense in the report options.Or is it possible to increase the timeframe on the QoS Statistics page? 2 minutes isn't very long to watch traffic.I have a QoS rule that only runs late at night and it's difficult to know if it's even working.Mike

mike_cc by • Not applicable
  • 3114 Views
  • 2 replies
  • 0 Likes

Migrating exchange

Hi,We are trying to migrate the users from Exchange 2003 to Exchange 2010. To do this migrating the traffic go thorugh palo alto but when i start the migration i receive this error "MapiExceptionNetworkError: Unable to make connection to the server. (hr=0x80004005, ec=2423)" in the server. It sound like there is a communication pborblem between ...

Resolved! how to get the logs or chart for QoS ?

Hi All,.How to get logs for QoS in monitor tab.Example: i have defined QoS for Skype application, and want know the effect of QoS on that particular application.Regards,Gururaj

Gururaj by • L4 Transporter
  • 9968 Views
  • 5 replies
  • 0 Likes

need help with u-turn nat between zones

Hi allI have read through the NAT tech notes and manuals from this site but canot seam to get this feature to work, i have u-turn nat enabled and working brilliantly in the same zone but i cant get the u-turn feature to work between zones/seperate networks. Let me explain our setup and any help would be very appreciated.Guest Client NetworkSourc...

LDAP (Active directory) Authentication for administrators

Hi,Im trying to configure my PA to validate with my AD to can manage it. I have create a group in my Active Directory called (com_cos), this group has the user to manage the PA. I have add this group in Group mapping and Authentication profile (Allowlist) but it seems like the PA has any problem with the group in AD.This is output error: User 'c...

Management Interface Traffic to Port 135

Hi All,I have a query regarding a management interface which is showing a lot of traffic (several times a minute) from the management interface to various IP's on port 135. Has anyone seen this before? Why would the management interface be sending out so many requests?Thanks,Andrew

agosney by • L2 Linker
  • 10263 Views
  • 2 replies
  • 1 Likes

NFS times out after 60 minutes

NFS times out after 60 minutes even when setting allow all ports between servers. Before that the NFS protocol got it's session timeout increased to a few days, but it would still timeout after 60 minutes. iptables did not have this problem with the same two servers and nothing has changed other than replacing iptables with a PAN.

ddaniels by • Not applicable
  • 14417 Views
  • 7 replies
  • 0 Likes
  • 24401 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks