General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 194 Views
  • 0 replies
  • 0 Likes

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 877 Views
  • 0 replies
  • 0 Likes

Resolved! change application time out

Hi

someone did make modification on the time out defined in a application definition

is it the only thing to do,  to modified the time out.

or you have to create an application override to force this modification.

thank's    

Gregoux by L4 Transporter
  • 1821 Views
  • 1 replies
  • 0 Likes

Applipedia not up to date?

I've noticed the applipedia online does not contain the latest applications since the 376 update?

Currently only seeing 1674 applications.

Any ideas?

rds by L2 Linker
  • 2099 Views
  • 1 replies
  • 0 Likes

no wildfire log entry

Hello all

I have been creating a antivirus profile with alert action for all decoder for antivirus action and wildfire action.

but I tried to obtain some logs in wildfire log entrie. May be I didn't request the good file on the web?

How could I proceed

...

Gregoux by L4 Transporter
  • 6048 Views
  • 15 replies
  • 0 Likes

Firewall Seems to Be resetting SSH Connections

HI,

I have a problem with my Palo Alto firewall deployment were the firewall seems to be resetting all connections using port TCP 22 (SSH, SCP, SFTP). I have done packet captures on the ingress interface of the firewall and it shows as if the connecti

...

Resolved! Throughput

Hi,

Is there a way to get system statistics session output with API ?

or just throughput value ?

panos by L6 Presenter
  • 2801 Views
  • 1 replies
  • 0 Likes

Resolved! Basic fundamentals

Hi,

Just have some queries on Palo Alto firewalls posting some questions. Help on these is much appreciated.pi

1)  How to initiate a ping from GUI

2) As per my knowledge Vwire Sub-interfaces must be acquiring the properties from parent interface, and we

...

Captive portal doesn't show with Firefox

Is anyone out there having issues getting captive portal to show when using Firefox.  All I get is a blank screen, the URL does not change to the redirect address and it appears to be stuck doing something.  The environment is the following:

* Firefox

...

victormg by Not applicable
  • 2940 Views
  • 2 replies
  • 0 Likes

Resolved! Push dynamic update through Panorama

Hi all,

Does anyboby know if it's possible to either push dynamic (scheduled of course, don't want to do that manually every day) update from panorama to managed palo or configure palo for requesting their dynamic update to panorama ?

of course palo do

...

VinceM by L5 Sessionator
  • 3660 Views
  • 5 replies
  • 0 Likes

Just skype

Hi,

An environment like LAN - PAN - Proxy - Router - Internet

is there a way to block everything but allow just skype.No web browsing, nothing allowed except skype.

I tried some rules but skype couldn't connect.

Thanks.

panos by L6 Presenter
  • 3981 Views
  • 6 replies
  • 0 Likes

Palo Alto blocking Symantec Antivirus

My URL filter on my PA2050 is blocking https://143.127.102.40/mrclean as malware-sites.   This is Symantec SEP talking to the Symantec cloud.   A discussion of the URIs used by Symantec is located here: Clients connecting to an IP. | Symantec Connect

...

EdwinD by L3 Networker
  • 2564 Views
  • 1 replies
  • 0 Likes

cluster question

Hi,

Device1 Active

Device2 Passive

When a failover happens...it takes about 7-8 timeouts(45 second) : device1 passive device2 active

When a failover happens again  it takes about 1 timeout(good time):  device1 active  device2 passive

Any ideas ?

Thanks.

panos by L6 Presenter
  • 2090 Views
  • 3 replies
  • 0 Likes

SYSTEM ALERT: Version 5.0.5

Hi All,

After upgrading to version 5.0.5 i have a strange thing....

---

severity: high

opaque: HA Group 1: Peer version of 5.0.5 not compatible with the HA2 keep-alive setting; disabling HA2 keep-alive

---

severity: critical

opaque: HA Group 1: All HA1 conn

...

Oleksandr by L3 Networker
  • 3581 Views
  • 9 replies
  • 0 Likes

Resolved! M-100 Panorama Mode Collectors in HA

Probably an obvious question but the documentation doesn't seem to reference this directly...

If I have 2 x M-100s in HA, by default they are in a state where the primary is listed within the "Managed Collectors".  From what I understand the logs are

...

dmeier2 by Not applicable
  • 2970 Views
  • 2 replies
  • 0 Likes

Resolved! Global Protect with Active Directory Accounts

Hello all,

I have what might be a simple question. I want to authenticate to Global Protect SSL-VPN using my current Active Directory users. Do I need to have the User ID software installed on a domain server to do this? If thats needed for LDAP can o

...

jnunham by Not applicable
  • 3265 Views
  • 5 replies
  • 0 Likes

Resolved! Bi-directional NAT is still requiring a /32 static route

I have two VPN tunnels established with a vendor.  1 is in San Digeo and 1 is in Las Vegas.  The subnet in SD uses 10.220.1.0/24 and LV uses 10.220.2.0/24.  With both tunnels they want me to NAT my IP of 172.16.1.235 to 10.200.249.30.  I have a NAT s

...

nthen by L3 Networker
  • 4115 Views
  • 4 replies
  • 0 Likes
  • 24011 Posts
  • 115 Subscriptions
Top Solution Authors
Top Liked Authors
Labels