General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

UnAuthorized Access -- CSP

Hello, I am not able to access the Customer Support Portal getting below error: UnAuthorized Access Your membership has expired or has not been approved, please contact Palo Alto Networks Support. I have contacted the NextWave <[email protected]> and they mentioned as below: I'm sorry but we are unable to assist with the ...

Resolved! Block Connections from Different Region

Hi All, We have a requirement to setup a Block rule for the users connecting to GlobalProtect from different countries. We need to allow users only from one particular region to connect to GlobalProtect. In Prisma we can use the Specific Tag and Specific Name on the rule to achieve this. But I don’t find any related document that suggests this...

Slow speed with GlobalProtect

Hi to all,We are trying to understand why the download speed is really slow vía GP.We stablish a VPN GP with IPsec without Split Tunneling. We acces to some public web to download a test file. Im downloading a 1G file.If we download without GP but through the Palo Alto we achieve 60MB/s, but vía GP we achieve maybe 6 or 10MB/s.Any idea about tha...

nanukanu by • L2 Linker
  • 58071 Views
  • 16 replies
  • 0 Likes

Can you have an interface with an SFP in receive only mode?

I have a scenario where we have a data diode transmitting over fiber to an interface on our PA220R (sfp 100fx). The difficulty is that the PA considers the interface as 'down' because of the nature of the data diode, the diode only sends to the PA over this fiber but will not receive any data from the PA by design. Does anyone know a way to hard...

Extending VLAN through IPSEC + GRE

I am trying to extend the VLAN from main site to branch site using a combination of GRE and IPSEC. Below is a quick representation of the architecture, the objective is to enable remote communications between the main and the branch sites for all devices within VLAN-1. I am aware that PA does not natively provide L2 tunnels, and VXLAN ...

OELHANCHI_0-1714232289883.png

VM-50 discontinued?

Hi, We have a VM50 firewall in our business for 3yrs and have been told that the VM-50 is no longer available? As such, we need to get a VM-100 licence. Are there any other options? - since the cost is double? Thanks

cluster

Hello, Can you form a HA cluster with a PA-3020 and PA-3060? Or do models have to be identical?

Joeful by • L0 Member
  • 906 Views
  • 1 replies
  • 0 Likes

Globalprotect-Need LDAP and RADIUS auth(MFA)

I am currently using Digipass Vasco OTP as RADIUS for Globalprotect. Users just put in their LDAP username and the OTP to login.I'm looking to add another factor i.e LDAP username and password before they get prompted for RADIUS token. Pls help me configure this. thanks.

What is the deal with VM Panorama mode maximum log storage space?

Hello,Documentation states that VM Panorama mode can support up to 24TB of log storage on a single virtual appliance.Each logging disk has 2TB of storage capacity for a total maximum of 24TB on a single virtual applianceSo we add 12 virtual disks with 2TB of storage to the machine. > show system disk details shows 12 disks with 2097152 MB of ...

10.0.10 code bug? LDAP auth server is up !!!

Since upgrading to 10.0.10, we've been getting system medium severity messages on our active firewalls that "LDAP auth server xxxx.xxx.xxx is up !!!". We never receive a down message though. We're not experiencing any issues with LDAP which makes me think this is a bug false alert. Is anyone else experiencing this?

jmurphy by • L2 Linker
  • 9292 Views
  • 12 replies
  • 1 Likes

Resolved! Firewall shows disconnected from Panorama after upgrade to 10.1.5-h1

Just upgraded one of my standby firewalls from 10.1.5 to 10.1.5-h1 for the OpenSSL vulnerability and after the install and reboot it shows disconnected in Panorama (also confirmed via the cli show panorama-status). My Panorama has already been running 10.1.5-h1 for the last week or so with no issues. I have opened a P1 support case but haven'...

Whatsapp traffic cannot recognize in PA for iPhone user.

Recently iPhone users only facing in WhatsApp "connecting" message, User could not send a message and make a call on corporate wireless network But, working in mobile network. It was working before, day by day users facing this issue is increasing. Still WhatsApp working for some of the iPhone users on same wireless network. Tried IOS software...

  • 24458 Posts
  • 125 Subscriptions
Top Solution Authors
Top Liked Authors
Labels