This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4224 Views
  • 0 replies
  • 0 Likes

Resolved! Migrating OSPF to the Palo Alto

Hello. I am working on the initial configuration of our new palo alto's. These are not in production yet. These new firewalls will be taking over our vlan's (will be the gateway) and will be running OSPF. I will stop the ospf instance on the local router and migrate to the firewalls. I am following the "How to configure OSPF" pdf that I found he...

ldavie by • L2 Linker
  • 5535 Views
  • 3 replies
  • 0 Likes

Resolved! Adding domain to username for user identification

Hello We are using RSA for user authentication with Global Protect.We need to identify the LDAP group (Windows Active Directory) the user belongs to, but It doesn't work.The reason is that the user we use for authentication doesn't include the domain and the LDAP query doen't match the right user:cscworks@pa-intx.cajamar.int(active)> show us...

iOS device "network errors" when SSL Decryption is turned on

Regarding SSL Decryption:I originally put the whole category of "social-networking" under a Decrypt rule (mainly to decrypt Facebook to block Facebook games). However, when I tested on my iPhone after that, LinkedIn, Twitter and Facebook all had "network errors" and basically wouldn't connect and pull down information. I then removed the "soci...

uscit by • Not applicable
  • 3486 Views
  • 2 replies
  • 0 Likes

GlobalProtect VPN with Windows-PKI (W2K8R2)

HiCurrently we have a beta-environment for GlobalProtect-VPN on Windows7 (64bit).Authentication with LDAP works fine.But we want to use a client-certificate (user) from our internal Windows-PKI which is already rolled out to the endpoints.Where can i find a complete step-by-step-guide?Thanks for your helpJuergen

Resolved! OpenVPN

Hi,Since application version 370 released, I have some trouble with openvpn :Openvpn udp on port 443 didn't work anymoreOpenvpn udp on port 1194 worksMaybe there is a bug on the new application version. Openvpn not on the default port didn't be reconize anymore.Anyone else have this problem ?Thx,Best regards, Franck.

Policy Based Forwarding

We have a branch in a different state to which we have a DS3 MPLS circuit. We and our branch office have there own ISP connections for Internet access. I would like to have redundancy build between both of our companies through IPSec VPN tunnel in the event of DS3 goes down. So my question is can I use PBF's to achieve the redundancy. Is PBF c...

Is there any limitation for the number of the custom signature ?

Hello, GuysThank you first.My customer want to know whether there is any limitation for the number of the custom signature. Customer wants to make about 50 custom app , for the app-id. And if there is any limitation. There might be serious problem.Have a nice day~

JTR by • Not applicable
  • 3158 Views
  • 2 replies
  • 0 Likes

how to clear TCP options using Palo Alto firewalls?

At the moment we are replacing our Cisco ASA firewalls with Palo Alto firewalls and one thing we cannot still figure out is how to make the Palo Alto firewalls to clear the TCP options on TCP sessions. This can be done, in Cisco ASA firewalls, using the commands:tcp-options clear range <lower number> <higher number> clearIs there any...

netexgb by • L1 Bithead
  • 6229 Views
  • 8 replies
  • 0 Likes

Resolved! L2 "switch" ports?

Hi All,Am I right in saying if I configure a selection of interfaces (in this case on a 3020) as L2, and then assign them to a VLAN with a L3 VLAN interface all those ports will sort-of act like a switch (or more likely a hub)?A bit like the handful of ports you get on some Small office firewalls (thinking Juniper SSG, sonicwall, and some fortig...

Dpeters1 by • L2 Linker
  • 3680 Views
  • 2 replies
  • 0 Likes

Resolved! minimum PanOS version for UserID version

PanOS release notes call out the minimum User ID agent version supported. UserID agent release notes do not call out a minimum PanOS version. Is there any issue in getting ahead on the UserID agent version? For example, we have several devices running PanOS 5.0.4, but one cluster stuck back on 4.1.0. Can we upgrade the UserID agent to 5.0.4 with...

gmparis by • Not applicable
  • 3085 Views
  • 1 replies
  • 0 Likes

Resolved! All sites registering as "unknown"

Came in today with users screaming that they were getting blocked on all websites. Finally extracted enough information from them that the category was coming up as “unknown” for all sites…even Google. Decided it had to be an issue in the URL filtering…updated to latest Brightcloud…no change.Thought URL cache or dynamic URL cache might be the ...

mmartin by • L1 Bithead
  • 20352 Views
  • 34 replies
  • 1 Likes

PBF rule

Hi,Could you please help me with the below query.What exactly it happens when I enable "Disable this rule if nexthop/monitor ip is unreachable" in the PBF rule - > Forwarding Tab - > Monitor Check Box.Suppose , if the Monitored IP is not reachable , It ll fall back to routing-table. What happens if the monitored IP is reachable after some ...

  • 24355 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks