This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

HA A/A.. tunnels connecting through fixed IP and not floating IP

Greetings,We have our first tunnel up and running, but it’s connecting on the fixed IP address, not the floating IP. This eliminates the failover capability.Could this be a simple configuration parameter, or a bug?How can I fix this. I havent worked much on A/A so I am not sure how it works

rkamat by • Not applicable
  • 2190 Views
  • 1 replies
  • 0 Likes

User usage report enhancements

Based on what I am seeing, there does not seem to be a way where I can limit what users can be reported against. For example, I have a help desk manager that needs to only see his staff. Right now, based on the way the firewall functions, he can see what the president of the company is doing online. Per our company policy, all URLs must be lo...

nthen by • L3 Networker
  • 3452 Views
  • 3 replies
  • 0 Likes

4.1.13 stable?

I have been running 4.1.12 for some time. For me, this has been a stable release. 4.1.13 has been out since 5/30/2013. I do not see any discussion on 4.1.13 in the forums. Are people generally pleased with 4.1.13? I'm considering upgrading my HA pair of 2050's to 4.1.13.Thank you.

EdwinD by • L3 Networker
  • 4009 Views
  • 5 replies
  • 0 Likes

Palo Alto - Sonicwall - Compatibility

Does anyone have any experience setting up VPNs between these two vendors producs? is this question too vague?We're considring getting sonicwall devices for remote offices but Im worried about possible compatability issues. Any feed back would be appreciated.We have a PA-4020thanks

choff123 by • L3 Networker
  • 4249 Views
  • 1 replies
  • 0 Likes

Resolved! Data Filtering document

I was reading up on data filtering and came across this link: https://live.paloaltonetworks.com/message/1350#1350 which points to this document https://live.paloaltonetworks.com/docs/DOC-1048 I tried to access the document but it comes up with unauthorized access, please contact support. I am still digging and would like to get a little more ...

RobMarmmo by • Not applicable
  • 3372 Views
  • 1 replies
  • 0 Likes

Cisco ASA to PaloAlto VPN conversion

Has anyone developed step by step instructions for migrating site to site VPN's from a Cisco ASA to a PaloAlto 2050?I have approximately 30 VPN's to convert and currently running in VWire mode so all the VPN's will need to be added prior to moving off VWire and eliminating the Cisco.Any help would be appreciated as far as best practices.Thanks i...

rswauger by • L0 Member
  • 7948 Views
  • 4 replies
  • 0 Likes

Resolved! Virtual Wire

Hello,First post here - looking to get a deep-dive article on virtual wire. I get the general idea, the thing I'm trying to wrap my head around is how the device is able to provide NAT services without L3 services.Thanks!

ehmcc by • Not applicable
  • 5662 Views
  • 5 replies
  • 1 Likes

Create a deny page for a specific set of users

I need to create a deny page for all web traffic for a specific set of users. I have the AD group created and have both the ldap and user-id agent setup. For this specific group when they try to browse the internet they need to get a page that says Per company policy you are not authorized for Internet Access.

eric1 by • Not applicable
  • 2073 Views
  • 1 replies
  • 0 Likes

ace

where I can order my shirt of paloalto networks

omar by • Not applicable
  • 2542 Views
  • 2 replies
  • 0 Likes

Resolved! Two client account on one PC

HelloEach users have two and four accounts in their office.All account are authenticated by Active-Directoy.Each users use several accounts on one PC at the same time.For example,Mr, A has 'AAA' account and 'aaa' account.He uses 'AAA' account when connect Internet.He uses 'aaa' account when connect office E-Mail.He uses two accounts on one PC(on...

Resolved! Custom report via Panorama using XML-API

Hi,I am trying to create a custom report via Panorama and then retrieving the report data using the XML APIs.I am using the following XML-API URL to create a custom report.https://<Panoram IP>/api/?type=config&action=set&key=<KEY>&xpath=/config/shared/reports/entry[@name='report-1']&element=<type><panorama-tr...

Resolved! Get FQDN table using XML-API?

Does anyone know if it's possible to get the current FQDN table (CLI> request system fqdn show) using the XML-API? We recently had an issue where a bad FQDN mapping was retrieved and I want to set up monitoring to catch it if it happens again.

User-ID Agent & Desktop PowerManagment

We have User-ID agent setup and running, Where it polls the machines every 20 minutes, to track the users.Since we are now trying to implement Power management on the Desktop. It appears that the USER-ID agent system is waking the machines up. Has anyone else run into this problem? And if so what solutions have you found?So far these are the sol...

Resolved! How can I publish a Server via a public IP from the same Subnet of the WAN Interface?

Hi guys,I'm new to PAN Firewalls and currently I am trying to publish a customer's SBS Server via a PAN200. The Firewall has the public IP 218.1.1.218(of course i posted a fake one ) and the server shall be accessible via 218.1.1.220. - I've configured Accessrules allowing traffic from WAN to LAN + SBS internal IP- Static unidirectional NAT for...

vertical by • L2 Linker
  • 7795 Views
  • 8 replies
  • 0 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks