General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 271 Views
  • 0 replies
  • 1 Likes

bandwidth use

I can see the live-time bandwidth by using the CLI:

Show system statistics session

But that only shows the real time download bandwidth – it doesn't show our upload bandwidth. Is there a command to use to see this traffic instead or combined with our d

...

wesa by Not applicable
  • 2641 Views
  • 1 replies
  • 1 Likes

Resolved! Brightcloud Url Filtering Cache

Hi,

Can we make Pan Cp and DP cache off to use URL filtering always dynamic.

I want from Pan that it always asks to brightcloud

How can I do this ?

panos by L6 Presenter
  • 4529 Views
  • 8 replies
  • 0 Likes

How to apply Data Filtering effectively

It seems obvious to me that you can't simply apply the built in CC and SS filters in a Security Profile with an "any any". In my testing it really fouls up general web surfing.

Why is there no detailed documentation (at least any I can find in Knowled

...

CWillms by L2 Linker
  • 11658 Views
  • 9 replies
  • 0 Likes

Resolved! Websites with just text

I recently turned on URL Filtering and now some sites are coming up with just text.

CNN for example, has bullet points on the left next to titles that I can click on, the header is a small square with what looks like a jpeg avatar in the middle.

No gr

...

Resolved! VPN client-to-site

Hi!

I wonder if anyone managed to configure the IPsec VPN with AD authentication.

Note: No license Global protect.


At.,

Bismarck by L1 Bithead
  • 3233 Views
  • 5 replies
  • 0 Likes

How to force generating a daily pdf report?

Is it possible to force generating a daily pdf report? I am working on fine tuning reports to be send out on a daily bases, but I really don't want to wait 24 hours to wait for the result. Is there a way to force sending our the daily reports? There

...

bbsoc by L2 Linker
  • 3123 Views
  • 4 replies
  • 0 Likes

Resolved! How do I reset a PA activated address block action?

Since you are able to Block the source and/or destination IP address as an action taken in a protection rule (IPS, Spyware, Zone protection etc...) is there a way to reset the timer before the elapsed time has been reached.  If you block for 3600 sec

...

HITSSEC by L4 Transporter
  • 1811 Views
  • 2 replies
  • 0 Likes

VPN tunnel config question

I'm running PANOS 4.0.13.  Can I set up a tunnel where the peer IP is 1.1.1.1 and the remote proxy id is the same IP as the peer?  I think I tried this before on an earlier release and it didn't work, so I had to NAT.  Thanks!

iguarino by L0 Member
  • 1940 Views
  • 2 replies
  • 0 Likes

OCSP query

Hi,

We are implementing a SSL-VPN solution using Global Protect and our own CA. From what I have seen the OCSP queries are made on demand, when the certificate is presented for the first time, and then at a fixed interval(60 minutes). I tried changing

...

sslvpn 4.0.x issue

Hi,

When configuring sslvpn we tried to use an Adsl modem which makes its public 1.1.1.1 NAT 443 to a local ip 172.16.2.1

this ip is PaloAlto's L3 interface.Default gateway of PaloAlto is 172.16.2.2 which is modem.

People can access to internet from Pal

...

panos by L6 Presenter
  • 2438 Views
  • 4 replies
  • 0 Likes

Resolved! Blocking files by URL Category and Zone direction

Hello,

I currently have a security rule that blocks the downloads of ".exe" files from the "unknown" URL category (which sits above my general Internet/WildFire Forward rule).  It works extremely well in dropping a huge amount of the garbage out there

...

CRHC by L4 Transporter
  • 2414 Views
  • 2 replies
  • 0 Likes

Days needed for Palo Alto subscription to release

Hi All,

Our palo alto subscription currently near the end of subscription expiration date.

We've ask quotation for the new license from PaloAlto distributor, and based on information from the distributor it will take 4 - 6 weeks for new subscription to

...

Resolved! Wildfire report

I like wildfire, but I think the web frontend must be more elaborated.

I'd like to customize and export reports to text to obtain statistics about ip origins, filenames, ...

aojea by Not applicable
  • 1881 Views
  • 1 replies
  • 0 Likes
  • 23638 Posts
  • 107 Subscriptions
Top Liked Authors
Labels