General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

QoS

Hi,

Please help me out with the below issue and relevant links to configure QoS also will be helpful.

I have configured QoS Profile for class 8 traffic. and QoS Policy .. and then assigned the QoS Policy to an physical interface.

I have initiated some c

...

HA and stateless connections...

Ok, I have what may be a newbie type question, but it is one that I wanted to ask.

In the PA 201 class, they teach for HA, that stateless connections are not synched.

What is considered a stateless connection?  I do not think it would be UDP traffic (a

...

scantwell by L4 Transporter
  • 2643 Views
  • 4 replies
  • 0 Likes

Resolved! Global Protect portal authentication with LDAP fails

We have set up GP to authenticate against an AD server . User group mapping has done and u can pull the users . However, whenever you try to connect with one of the  users from the GP client or portal web page ,  you get authentication  fails message

...

usvi by L3 Networker
  • 3821 Views
  • 9 replies
  • 0 Likes

Resolved! vwire policies

HI all,

when we deploy the paloalto firewall in vwire mode and we have multiple zones (system zone, application zone, bdd zone), can we create rules to permit traffic between these zones through pan firewall ??

thank's in advance

atelcom by L3 Networker
  • 4405 Views
  • 4 replies
  • 0 Likes

Palo alto starter questions

Hi,


Iam a starter for paloalto .. I have few questions so any answers on this will be help full...


  1. What is dynamic block lists and how can we use that?
  2. What is disable server response inspection in a security policy?
  3. how to add virus exceptions based on
...

Wildfire - Time required to block known malware

Using the 'free' Wildfire service, does anyone know how long should I expect the delay to be before downloads marked as malware are blocked subsequently?

For example, today we had a download ("pdf_delta_ticket.scr" below) that was logged as upload-ski

...

apackard by L4 Transporter
  • 2476 Views
  • 3 replies
  • 0 Likes

Resolved! Panorama WildFire Reporting

Hello,

I could not find any documentation on this inquiry.  Is it possible in 5.0.x to get the Wildfire aggregation logs from all my PAN devices to the Pano log Monitor for central reporting? Thanks!

Mike

CRHC by L4 Transporter
  • 2944 Views
  • 3 replies
  • 0 Likes

Resolved! Skype IM Problem

Hi,

I've some problems with skype instant messaging.

Sometimes the messages are not sent.

Checking firewall logs I see when messages are not sent an 'unknown-tcp' connection is denied.

Same destination port (but different ip) were used and recognized bef

...

diennea by L3 Networker
  • 15520 Views
  • 40 replies
  • 0 Likes

Resolved! PAN-OS User-ID agent limits

I have found documentation that states that the UserID software agent can support up to 100 domain controllers and/or Exchange servers. Is this for both the standalone agent and the built-in agent on a 5.0 firewall. Or is there a smaller design limit

...

scantwell by L4 Transporter
  • 5024 Views
  • 1 replies
  • 0 Likes

Resolved! User Activity Reports - No Data Available

Hi,

I have inherited responsibility for our Palo Alto 2050 and am trying to run user activity reports. However, for the past week the reports have been showing "No Data Available". The only change made I am aware of was having the policy set to only l

...

assist by Not applicable
  • 8470 Views
  • 5 replies
  • 0 Likes

Resolved! Mass migration of static routes

We need to migrated about 600 static routes into PA 5050. I want to do this quickly and efficiently . The goal is to copy all 600 routes and paste in the running config . Any idea how to do this ?

usvi by L3 Networker
  • 2468 Views
  • 3 replies
  • 0 Likes

Traffic Report: How much destination hosts contacted

Hi Community!

There is a predefined traffic report "Connections": It shows per row how much connections (sessions) a source host has made to a specific destination host.

Is it possible to create a report which shows per row how much distinct destinati

...

E by L0 Member
  • 2137 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama template is not working

Hi i created a template on panorama and tried to push to a device but each and everytime it says template name invalid.

i tried more than a few combinations nothing works. Any help.

Posted screenshot for reference.

srikanth by Not applicable
  • 3179 Views
  • 2 replies
  • 0 Likes

Resolved! How to force Panorama to push out new configs in serial?

One of the admins mumbled today that when changing shared objects in Panorama and pushing out new configs he needed to do this one by one regarding managed devices.

That is click on sync, wait until the text "out of sync" changes to "ok" (or whatever

...

mikand by L6 Presenter
  • 1651 Views
  • 1 replies
  • 0 Likes
  • 23725 Posts
  • 104 Subscriptions
Top Liked Authors
Labels