This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4116 Views
  • 0 replies
  • 0 Likes

SSL Decryption Certifcate GPO Distribution

When exporting a certificate used for inbound ssl decryption which is to be deployed throughout a company through GPO to Internet Explorer, do you have to select Export Private Key or is it okay to just export the certificate?What is the difference between File Formats PEM and PKCS12?If a company created their own CA, does this also require the ...

kalluga by • L0 Member
  • 3885 Views
  • 3 replies
  • 0 Likes

Resolved! Wildcards in address objects

Instead of creating several address objects for the many MS update servers available, and then creating a group to plug into a security policy that allows my WSUS server to get updates, is there a way to use wildcards in the address objects? MS updates lists multiple locations available for updates: http://windowsupdate.microsoft.com http://*....

Dynamic DNS Support

Does anyone know if/when Palo Alto will integrate dynamic dns into its devices? This would be a tremendous help for devices that are using DHCP from service providers.

TRCAdmin by • L0 Member
  • 2643 Views
  • 1 replies
  • 0 Likes

Resolved! Email scheduler and Report names

Does anyone know if you can change the email scheduler to allow a report recurrence to run monthly? The options in 5.0.1 allow daily but there is no option for monthly? Also why is the reporting name restricted to 31 characters? When creating a large number of reports it is very limiting to only be able to use 31 characters as it doesn't allo...

RSToyota by • Not applicable
  • 4895 Views
  • 3 replies
  • 0 Likes

Problem with Knowledgepoint and Internet Explorer 10

Just discovered that knowledgepoint (Jive engine) do not support ie10.I have also discovered that the reason is in Jive and is currently patched (The issue was that IE10 is being recognized as IE1, which does not pass the browser check)My walkaround is : I hit F12 and select Browser Mode:IE8 then I can work around it. (for some reason IE9 did no...

stig by • L1 Bithead
  • 2511 Views
  • 1 replies
  • 0 Likes

Resolved! VM100 and Custom Reports.

The VM100 on 5.0.2 seems to have an issue running custom reports. It crashes when I run them. I know I can just run them from the firewalls but is this something anyone is experiencing.

amansour by • L4 Transporter
  • 3455 Views
  • 3 replies
  • 0 Likes

Resolved! GlobalProtect Pre-logon - unique machine certificate?

Could not find a straight answer in documentation or in other threads - using GlobalProtect Pre-logon, does the machine certificate has to be unique for every machine (different CN) or can we use one, generic certificate and deploy it on every machine in the company?Many thanks for the answer!

How do I identify iOS company assets in HIP Profiles?

Hi,We are currently testing GlobalProtect as an SSL VPN replacement. In our current Juniper environment, we use a user cert (pushed to all company iOS assets via MDM) to verify an iOS device is a company asset. Is there any similar methodology we can use with the Global Protect environment as a HIP Profile that we can use to build policy against...

iOS GlobalProtect 1.3.0-68

Has anyone had any success with the new iOS global protect client?I can see my connection authenticates correctly however all I get on the iPad is the following error message:VPN ConnectionCannot connect to GlobalProtect. Your Internet connection or GlobalProtect Network appears to be offline. If the issue is persistent, contact your IT help des...

ethiSEC by • L2 Linker
  • 5101 Views
  • 5 replies
  • 0 Likes

PAN OS 5.0.0 "killing" remote connections

Hisorry for the "bad" title, bat that's whats actually happening.I have a NAT rule translating the external interface IP to an internal server from Port 443 to 8443 (for OpenVPN) and to the same server for ssh (no port translation)When I connect with OpenVPN to the VPN Server, it connects fine, but as soon as I have a certain amount of traffic (...

u13550 by • L3 Networker
  • 3265 Views
  • 2 replies
  • 0 Likes

Resolved! Trusted root CA on Global Protect Portal

Hi all,My question is: what is this "trusted root CA" you can select under the portal configuration for Global Protect used for.I get form the PA-help that you pass this certificate on to the client so the client will check the gateway server certificate if it was signed by this trusted root CA.What is the use of that check?If not supplied, coul...

mr.linus by • L4 Transporter
  • 11132 Views
  • 1 replies
  • 1 Likes

Broken link for PAN-OS 5.04 documentation

Hi,https://support.paloaltonetworks.com/index.php?option=com_pan&task=nu_sw_updates&Itemid=164 has a broken link for the release notes for PAN-OS 5.04 for the PA-3000 series. The file name is supposedly PAN-OS-5.0.4-RN-revA.pdf and it links to https://downloads.paloaltonetworks.com/software/PAN-OS-5.0.4-RN-revA.pdf?__gda__=1367548549_8f7...

ddaniels by • Not applicable
  • 6299 Views
  • 2 replies
  • 0 Likes
  • 24334 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks