General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1943 Views
  • 0 replies
  • 0 Likes

HA base on VM 100

I try to find information about HA on VM-100

some restriction exist or not with Active activ mode or active/passive mode

or it is recomended to use the Hypervisor High availability foncionality ?

Gregoux by L4 Transporter
  • 2960 Views
  • 3 replies
  • 0 Likes

Resolved! Can a pa200 be configured for shutdown via ups

Ive confighred APC network shutdown on my windows servers but im not sure if i can do the same for the firewalls.

I did something similar with my checkpoin firewalls from expert mode, but i used the redhat varient of the ups software which is what che

...

Can I count the number of An-virus signature in my PAN device?

Hello, Guys.

Thanks ahead first.

Out customer want to know how many anti-virus signatures are enabled in their PAN Device. I've heard that there's no CLI command or information about this. Before I give my answer to the customer, I want to double-check

...

JTR by Not applicable
  • 3461 Views
  • 3 replies
  • 0 Likes

Setting Up PPPoE

Hi All,

Having a little trouble in setting up a PPPoE connection.

Does anyone have a working config they are able to share with me as to how the Virtual Router is configured, the L3 interfaces etc as well as the outbound and inbound NAT'ing as this IP

...

Resolved! Certificates troubleshooting

Hi! we are trying to implement a SSL VPN connection through Global Protect using certificates from our own CA. We imported the root, intermediate and server certificate, but after configuring the portal we see an warning after commit: " cannot find c

...

Diffrent global protect client configuration

Hey

we have a setup that the client have 3 diffrent type of users connecting with global protect, and all need different configuration

as i see it the only way is to configure 3 different portal for each user type

am i right?    

minow by L4 Transporter
  • 3315 Views
  • 4 replies
  • 0 Likes

Non logging issue

OK a little background first I'm running 4.1 on a 5050 pair in A/P.  I have a server that is trying to do 80 and 443 out to a specific address and we have some logging wierdness going on.  If we don't have a rule in place allowing the traffic it will

...

Brinkman by Not applicable
  • 11147 Views
  • 31 replies
  • 0 Likes

Resolved! OCSP service route?

Question: What service route does the PA take for his OCSP requests?

Since we can not choose anything under the service routes, I suppose it will use the management as default...

Is there any way to change this to some other interface?

Linus

mr.linus by L4 Transporter
  • 7421 Views
  • 8 replies
  • 0 Likes

connectivity issue when firewall HA failover

Did anyone encounter such issue?

We noticed that whenever the firewall triggered a failover (FW1 to FW2).

external services seem to be disrupted.

eg1 :Gomes monitoring informed of connection/performance issues (though we test from some countries to be

...

ateo by Not applicable
  • 3972 Views
  • 5 replies
  • 0 Likes

SSH2 Login Attempt - ID 31914

Name:SSH2 Login AttemptID:31914Severity:Description:This alert indicates a login attempt against the target SSH server. If there are too many login attempts, then it may means an attack is try to brute-force user name and password.

I don't know who wr

...

rroberts by Not applicable
  • 9299 Views
  • 2 replies
  • 0 Likes

Resolved! AD Policy

In Active Directory, we have a policy that requires all users to change their password every 90 days.. we have it configured to prompt within the last 15 days of expiring.. this is not happening for Global Protect users..the user gets stuck in a loop

...

rrau by L3 Networker
  • 3515 Views
  • 6 replies
  • 0 Likes

connection interrupt

Hi,

An internal application is used for databese.It's default port is 5520

when we saw this behaviour we wrote an application override rule for that tcp port and named a new application.

after that we saw issue behaviour not changed(user is disconnectet

...

Destination NAT question

In this document is described how the NAT function at the Palo Alto.

https://live.paloaltonetworks.com/docs/DOC-1517

Has anything changed in the 5, in contrast to 4.1er?

So far, the destination NAT zone was generally on the incoming interface as the sou

...

register by L1 Bithead
  • 2191 Views
  • 2 replies
  • 0 Likes
  • 24197 Posts
  • 117 Subscriptions
Top Liked Authors
Labels