This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! HA PORT CONFIGURATION IN 4.1.12?

Hello world,I have done an upgrade of PA2050 cluster in 4.0.9 to 4.1.12. In 4.0.9 the link speed and duplex for HA PORT was forced.after the uprade in 4.1.12 I lost a lot of packet and when I tried to do a commit I had an error message. Commit failed because the HA PORT LINK IS NOT AUTO. I have changed the link port to auto and the issue was fix...

alle by • L3 Networker
  • 3502 Views
  • 2 replies
  • 0 Likes

Communication within different Trust Zones

Hi,I am working with PAN-500 3.0.9.I have configured 2 trust zones and 2 untrusted zones.l3-trust IP 192.168.0.254/22; l3-untrust 200.78.x.xl3-trust2 IP 192.168.10.254/24; l3-untrust 201.161.x.xI need that users from l3-trust get access to servers located at l3-trust2.I have this policy:From l3-trust2 to l3-trust source address 192.168.10.0/24 d...

Resolved! Block but don't log

Is there a way to block some vulnerabilities or spyware without logging them? For instance I would like to block all the Microsoft SQL Server Stack Overflow Vulnerability but I am tired of them skewing some of our charts and stats. it looks like I can alert (allow and log), block (drop and log), of allow (allow, no log) but nothing for block/no ...

jmayne by • Not applicable
  • 3310 Views
  • 3 replies
  • 0 Likes

Resolved! LDAP - Group Mapping with Child Domain users

Hi all,We'd like to use an Active Directory group in our root domain (e.g. "company.com") to control GlobalProtect authentications. Let's name this AD group "VPN Access" (it's a "Universal" Security Group). It contains user objects from the root domain itself but also from other subordinate domains like "branch1.example.com". Unfortunately, our ...

oschuler by • L4 Transporter
  • 6209 Views
  • 2 replies
  • 0 Likes

NAT rule for IPSEC VPN using NAT-T

I'm running PANOS 4.0.13 and I've enabled NAT-T via the command line. I'm having trouble getting traffic to pass and I assume it must be my NAT policy.1. I set a destination NAT as the vendor will be the initiator. The NAT is defined like this:srczone: Vendor-VPNdstzone: Untrust dstaddr: NAT IP (172.1.1.1.) dst translation addr: Real IP (10.1...

iguarino by • L0 Member
  • 3378 Views
  • 2 replies
  • 0 Likes

Resolved! PAN-OS 5.0.5 :Commit failed

Hello,I have upgrade my firewall from 5.0.1 to 5.0.5 successfully.But when I am trying to commit. It is giving below error.Operation CommitResult Failed Details vsys -> vsys1 -> global-protect -> global-protect-portal -> portal-tunnel -> client-config -> configs -> default-user-config -> gateways -> external -> list...

u22443 by • Not applicable
  • 3223 Views
  • 3 replies
  • 0 Likes

Resolved! Question Regarding Reporting

Hi All!I'm responsible for Security Analysis at a Telecommunications company up in New England. We've recently deployed Palo Alto firewalls to all sites, and I am currently going through PDF Reports manually while we get Splunk installed.One thing that confuses me is that occasionally, when doing a custom report, we get a traffic action I'm not ...

Resolved! FQDN vs NetBIOS Domain Name

Hi,I have a PA-3020 running agentless user-id. When I examine the traffic log, some user id's are displayed as netbios_domainname\userid and others displayed as FQDN\userid.ie:domain\billwvs.domain.somewhere.com\billwAny ideas as to why this happens?ThanksM

charger by • L2 Linker
  • 11963 Views
  • 5 replies
  • 1 Likes

DHCP Server ip adress give so slow

hello,we are try palto 5060 fw. Palto os 4.0 not yet update 4.1. Before we was using juniper and we write all rules same as juniper after all our network ip address relase or renew so slow.We have 3 zone. Trust, untrust and dmz. Our dhcp server is located dmz zone. As palto not as juniper not giving ip. it is slow.I want to learn what am i do f...

aupalto by • L0 Member
  • 5279 Views
  • 3 replies
  • 0 Likes

Resolved! what is wrong with blocking firefox

Hello all together,there something misterious for me becauseto block firefox i used this document https://live.paloaltonetworks.com/docs/DOC-5028 but with this config it hasn't been working so far.Is there a hand? My Config is:i tried it with enabled and disbled "data patterns"i appreciate any idea. ThxCheers Klaus

kdd by • L4 Transporter
  • 6014 Views
  • 4 replies
  • 0 Likes

Linux VPN clients

Does anyone have suggestions for Linux based VPN client software to users into a Palo Alto Managed environment. The dynamics (frequent upgrades of various distributions) is causing issues with our current 3rd party commercial VPN solution. Any suggestions would be greatly appreciated. Clients are Ubuntu based laptops.Phil

HITSSEC by • L4 Transporter
  • 4611 Views
  • 5 replies
  • 0 Likes

Resolved! GP - second gateway creation problem

HiI have PA200 with 5.0.5 with ateway and portal licence.On untrust interface I have /26 networkTo set up another gateway I added second IP to my untrust interface. X.X.X.141 with /32 mas - is it correct?after commit I add new gateway profile and try to add client configuration.But I cant pick a checkbuttonwhat I do wrong?I need second getway be...

_slv_ by • L4 Transporter
  • 4164 Views
  • 5 replies
  • 0 Likes

Resolved! Forward DNS requests

Hi,We are looking for a way to forward All dns requests to internal DNS ip.Either client changes its ip address to public dns addresses it should be forwarded to internal.Can we do that ?We don't want to write a deny rule for public Dns requests.We don't want to enforce client's dns.

Palo Alto blocking Wii game

Hi All -Just got my Palo Alto installed last week! So far so good. Hope this is the right place to be posting...I just got a message from a student that since the firewall install, a game on his Wii U, Monster Hunter, has stopped working. He claims this game works via P2P -- I haven't not looked in to this yet. We do not block P2P, but we u...

Resolved! GP with Host detetion and auto-connect

Hi,PA 500 in 5.0.4 and GP client 1.2.3Would like to be sure, I need GP auto connexion from outside of my network and no GP in my network.Then configure my external gateway, my internal host detection. It works well.But short question do I need the GP license for that ? Normally no, just one gateway, no HIP then no license ....During my test, it ...

VinceM by • L5 Sessionator
  • 6059 Views
  • 5 replies
  • 0 Likes
  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks