This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Problem when using domain name on Lage Scale VPN

Hi all.I config my network using Lage Scale VPN Guide.When i config satellite with gateway's IP, it okBut when i use gateway domain, satellite can't connect to gatewayThis is erros log from satellite.and ( description contains 'GlobalProtect Satellite connection to gateway failed. Satellite failed to connect to Gateway XX.XX.XX.XX due to "cert...

dat.tran by • L2 Linker
  • 5428 Views
  • 2 replies
  • 0 Likes

Resolved! L2TP/IPsec

I am task with psosible configuring L2TP/IPsec Remote Gateway on PA5050 to use windows 7 native VPN client. Does the PA5050 support L2TP for Remote Access?Thanks.

lgould by • Not applicable
  • 10707 Views
  • 5 replies
  • 1 Likes

Upgraded our tap mode only PA 4020 from 5.0.5 to 5.0.6 and it "cratered"... we get dataplane restarts every 10 minutes. Anybody else seeing this?

We have a PA4020 that serves as a "canary in the mine" so to speak if you will... we have it only in tap mode, and we feed it various network taps at various points in our network.Well, having this "canary in the mine" just paid off. I upgraded this box from 5.0.5 to 5.0.6 and we started seeing dataplane restarts every few hours. At support's re...

Resolved! Panorama config push error message.

I have a Panorama and a PA-500 both running 5.0.6. I was getting an error message when I tried to push a config. The issue was that I had an address object (it’s the same for security rules and various other things) on my box and on the Panorama with the same name. The only way I was able to get around this error was to remove the entry from my ...

BIYTC by • Not applicable
  • 3700 Views
  • 1 replies
  • 0 Likes

Beginner questions

Hi i am a beginner in paloalto networks.Can some one please help me to know the below doubts.Cli "telnet command" option is not seen in 5.0.0 versionHow can we take config backup automatically scheduledAdmin accounts are synchronized in HA active - passivePipe Command is not seen visible in 5.0Thanks

IPsec Site to Site Tunnel Crypto

All,First, please forgive me if this has been asked before, I wasn't able to find anything conclusive with any good explanation.Recently I renewed a couple of web server certificates and in doing so the CA recommended that I use SHA2 with a 256-bit message digest as SHA1 was known to have been cracked and was weak. This lead to some further digg...

cmateam by • L3 Networker
  • 6072 Views
  • 3 replies
  • 0 Likes

Resolved! Receiving "Internal error" on commit

Running 4.1.6 on 5050's with a Active/Passive HA.I activated the PAN-DB filtering on my Active firewall and then rebooted it, it failed over to the passive firewall just like it should. However, when my firewall came back up it came up as having HA not enabled, the autocommit is failing, and if I try to force a commit I get this error:· Error: ...

Brinkman by • Not applicable
  • 10491 Views
  • 3 replies
  • 0 Likes

multiple VLANs on one security zone - possible?

HiI need your help with one (probably simple for You problem).I have PA200 but I have only one "free" security zone and one phisical interfece free.I need to create 4 local networks (as a subinterfaces/VLAN) that every one has their own adresses, dhcp server, NAT policy to their own IP.Intervlan traffic shouldn't be allowed.Is it possible? Until...

_slv_ by • L4 Transporter
  • 11210 Views
  • 19 replies
  • 0 Likes

Resolved! autocommit fail

Hi,upgrading from 4.1.13 to 5.0.0 using upload option;device boots and at %10 for autocommit it fails and again and again trying to autocommit and fails at %10any idea ?

Resolved! log export

Hi,When exporting logs from Monitor / Traffic tab to excel file is there a way not to export all columns(fields) ?

Resolved! dhcp server stops

Hi,Panos ver 4.1.13 Dhcp server on layer3 interface suddenly stops.Restarting device fixes that.error comes as Failure: dhcp server is not enabled on interface 'ethernet1/3'.Anyone see that error ? Any idea ?

Resolved! Global Protect password expire

Hi,When clients connect to Global Protect they got a warning password will expire and it says 1 day.I looked to LDAP profile it is as default 7What could this warning be ? How can we disable this ?We also checked Active Directory for password expire but it is not 1 day.

Resolved! Guest Network Setup

Hi - What is the best method to setup a guest L3 network in PanOS?UntrustA = CorporateUntrustB= Guest InternetwDMZ = Wireless DMZ for Guest Internettrust = CorporateRequirements =1. wDMZ needs to get to a few specific IP's on UntrustA.2. wDMZ needs to get to the Internet via UntrustB.Initially I was thinking of a second vRouter? OR is policy bas...

PA-500 and Jumbo Frames

Background: I've been doing some testing with a pair of A/A PA-500's and decided to enable jumbo frames on a file server. I understand that the PA-500 does not support jumbo frames but when I begin a file transfer, it works, running at about 5,017 Kbps. After a little while the frame size reaches 4464-bytes and my speed increases to 392,644 Kbps...

GtY007 by • L0 Member
  • 4289 Views
  • 3 replies
  • 0 Likes

Qualys Scan alert on OpenSSH J-Pake

We run Qualys scans on the internal network, and it's picking up that the PA's are running OpenSSH ver 5.2. I receive the following warning:OpenSSH, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol. This allows remote attackers to bypass the need for knowledge of the shared secret, and successfully ...

dru by • L0 Member
  • 5610 Views
  • 6 replies
  • 0 Likes
  • 24403 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks