General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

AD-Server User-ID mapping issue

Hi Folks,

 

We have Agentless User-ID mapping configured on the firewall to monitor and fetch the User-ID details from the AD Server.

 

Recently we are facing an user-ip mapping issue on the firewall. An same IP address is mapped to multiple users random

...

Prelogon with 2fa

I have a question regarding prelogon and 2fa.I have managed to successfully set up a prelogon tunnel and the user tunnel.

Now a 2fa authentication should be set up. I have set up a radius server for this, tested it and so far it works.

The only thing t

...

Evahi21 by L1 Bithead
  • 573 Views
  • 0 replies
  • 0 Likes

HA Clustering session synchronization

Hello!

I have some question about session synchronization in HA Clustering (geographic cluster). All firewalls in HA clustering use the first rule for traffic that should not match it, this only happens on geoclustered firewalls. Later, the rules are

...

mateuszg by L1 Bithead
  • 861 Views
  • 2 replies
  • 0 Likes

Ubuntu_OpenLDAP with PAN-OS User id

Hi All,

 

Is there any document which will show how to configure Ubuntu based OpenLADP as a user id agent with Palo Alto firewalls.

 

How to add the LDAP server into Server monitoring profile. 

 

 

Block Access to private Gmail but allow corporate

Hi all.

Im looking for a solution to block user access to private gmail accounts but allow a corporate accounts to be used.

I'm aware that there is a solution involing proxy server and X-forwarder.

Is there any other way to do this without dedicated pro

...

Authentication of Users through Captive portal query

Hi Team,

 

We had configured captive portal on the firewall recently.

 

In Authentication policy we had selected source users as any and we are using Active Directory for Authentication.

 

Also we had configured agentless user-id mapping on the firewall an

...

Creating subinterfaces on Active Active HA

Hello ,

 

I have to create 6 Subinterfaces on A/A cluster

 

So i need 3 IP addresses from each VLAN -  1 for FW1  , 1 for FW2 and 1 as Floating IP

 

My question is , do i have to go to each firewall separately to configure the respective IP ?

If yes , what

...

Error while creating a user

Hi All,

 

Facing an error (application icloud-uploading not found) while creating a user on my palo alto 850 using panorama. Attaching the image for better idea. Pls help 

 

IPSEC VPN tunnel getting disconnected.

IPSEC VPN tunnel got disconnected abruptly. We need to find out what could have caused this from the logs and adjust the VPN parameters accordingly.

 

 

From logs i found this.

 

 

ikemgr.log
2021-10-15 03:35:11
2021-10-15 03:35:11.814 +0000 [PNTF]: { 5: }:

...

RPrasad3 by L0 Member
  • 1411 Views
  • 2 replies
  • 0 Likes

Adding a port to existing SSN

Hi - 

 

   I have an existing SSN configured for a device with ports added in Objects, like to add few more ports. what are steps I need follow? Please let me know....Thanks!

Andyz88 by L0 Member
  • 740 Views
  • 1 replies
  • 0 Likes
Top Solution Authors
Top Liked Authors