General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 2192 Views
  • 0 replies
  • 0 Likes

Need an advice

Hello team..

I need the best or a good advice to do the correct sizing for a PAN device, yo know I don't know if there is some sizing tool that can help me, or some document to read it and understand what is the best way to do the right sizning...

than

...

Resolved! Do I know when some vulnerability ID update??

Hello

I know vulnerability 30844 signature when date update last.

And I know it what version is last.

I can find AV signature from threat vault page in support site.

But I don't find to check it in CLI , GUI , Threat Vault etc.

Thanks

Resolved! List of available protocol decoders?

Anyone know where I can find a list of available protocol decoders in the PA's?  Is the "context" area of custom app/vuln sigs the only place where this is listed?  If so, that's not a very easy place to extract the list from.

mgentile by L2 Linker
  • 5096 Views
  • 4 replies
  • 0 Likes

Resolved! o session

Hi,

Have a installation with a PA-200 firewall.

It's a standard vwire-setup with policyes from untrust to trust. It is places between the ISPs router and another firewall.

The traffic is forwarding between the interfaces, but the PA-200 is counting 0 se

...

klumpen by L1 Bithead
  • 4115 Views
  • 5 replies
  • 0 Likes

What am I gonna do? (delete language.txt)


Hi,,,

for the first time in long time

I write question,,

since I use pan os 5.0

I am used to use upload file to scp~!

I always try to upload language custom file,,

and so There are many dirty files in paloalto

I would like to delete language file to arrange

...

Resolved! Does SSL decryption work on the Forward Proxy in tap mode?

Hello, This is Heejun from Uquest.

I'm testing SSL decryption, and read some document saying that SSL decryption won't working with Forward Proxy in tap mode.

But I heard that someone did this during previous POC. There's no way to check this right now

...

JTR by Not applicable
  • 4251 Views
  • 4 replies
  • 0 Likes

SSL Decryption Certifcate GPO Distribution

When exporting a certificate used for inbound ssl decryption which is to be deployed throughout a company through GPO to Internet Explorer, do you have to select Export Private Key or is it okay to just export the certificate?

What is the difference b

...

kalluga by L0 Member
  • 3672 Views
  • 3 replies
  • 0 Likes

Resolved! Wildcards in address objects

Instead of creating several address objects for the many MS update servers available, and then creating a group to plug into a security policy that allows my WSUS server to get updates, is there a way to use wildcards in the address objects?  MS upda

...

Dynamic DNS Support

Does anyone know if/when Palo Alto will integrate dynamic dns into its devices?  This would be a tremendous help for devices that are using DHCP from service providers.

TRCAdmin by L0 Member
  • 2498 Views
  • 1 replies
  • 0 Likes

Resolved! Email scheduler and Report names

Does anyone know if you can change the email scheduler to allow a report recurrence to run monthly?  The options in 5.0.1 allow daily but there is no option for monthly?  Also why is the reporting name restricted to 31 characters?  When creating a la

...

RSToyota by Not applicable
  • 4698 Views
  • 3 replies
  • 0 Likes

Problem with Knowledgepoint and Internet Explorer 10

Just discovered that knowledgepoint (Jive engine) do not support ie10.

I have also discovered that the reason is in Jive and is currently patched (The issue was that IE10 is being recognized as IE1, which does not pass the browser check)

My walkaround

...

stig by L1 Bithead
  • 2394 Views
  • 1 replies
  • 0 Likes

Resolved! VM100 and Custom Reports.

The VM100 on 5.0.2 seems to have an issue running custom reports. It crashes when I run them.  I know I can just run them from the firewalls but is this something anyone is experiencing.

amansour by L4 Transporter
  • 3246 Views
  • 3 replies
  • 0 Likes

Resolved! GlobalProtect Pre-logon - unique machine certificate?

Could not find a straight answer in documentation or in other threads - using GlobalProtect Pre-logon, does the machine certificate has to be unique for every machine (different CN) or can we use one, generic certificate and deploy it on every machin

...

How do I identify iOS company assets in HIP Profiles?

Hi,

We are currently testing GlobalProtect as an SSL VPN replacement. In our current Juniper environment, we use a user cert (pushed to all company iOS assets via MDM) to verify an iOS device is a company asset. Is there any similar methodology we can

...

  • 24251 Posts
  • 119 Subscriptions
Top Solution Authors
Top Liked Authors
Labels