General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 1892 Views
  • 1 replies
  • 10 Likes

Page slowness 4.1.9

We have an issue with pages sometimes not loading without pressing F5 to refresh them.  It seems to be a variety of sites - http mainly but some https.  Large downloads will pause or fail.  The resources look okay - 5050 with 200Mbps ethernet to inte

...

jmeyer by Not applicable
  • 1281 Views
  • 0 replies
  • 0 Likes

Resolved! Logging of threats - Possibly to set it globally ?

Hi,

I am in the start of setting up Threat log forwarding to Syslog and/or SNMP-traps.

Do I really have to enter every single rule to enable this logging or is it a smarter way of doing this ??

I really hope that I am not forced to add the same log forw

...

stig by L1 Bithead
  • 2466 Views
  • 4 replies
  • 0 Likes

Block page when using Google SafeSearch

When using custom applications to enforce Google SafeSearch settings, the user is not redirected to a block page if, for example the user tries to access Google and has disabled the SafeSearch feature. In this case, the user isn't redirected to a blo

...

cdamore by L1 Bithead
  • 1316 Views
  • 0 replies
  • 0 Likes

Syslog via TCP?


I note that the PA-2050 units I have running 4.1.7 PanOS generate their syslogs as UDP/514.  Is there any way to tell the unit to use TCP for syslog messages?

Our SIEM/syslog collector (AlienVault) seems to be missing some of the syslog messages we (

...

Resolved! Data pattern limitations.

Hi All,

"Save the telnet" movement inspired me . I'd like to find out if any one is experiencing same limitations I do:
- " at least 7 bytes" limit in Custom Data Patterns.

- "regex" has very limited capabilities in Custom Data Patterns.

Would adding t

...

abraun by L1 Bithead
  • 2885 Views
  • 1 replies
  • 0 Likes

allowing MS product activation and denying web access

I have a network that I want to allow MS product activation to work but web browsing and other internet activity to be denied.

I have two main security policies that apply just to this network although DNS and ntp is also allowed:

The first one is an a

...

kjh by Not applicable
  • 5752 Views
  • 2 replies
  • 0 Likes

Alarms - Log DB size over threshold

Hi guys,

It looks like our PA-2050 is not purging old log files from the database. When we log in to the Web UI we get alarms like this:

According to the documentation this error shouldn't occur. The PA box should automatically purge old log entries wh

...

oschuler by L4 Transporter
  • 2722 Views
  • 4 replies
  • 0 Likes

Zone to Zone for OWA/activesync?

Our users private devices are on a separate subnet/vlan and a separate PA zone using the Google DNS servers.  I have been forcing a captive portal in order to enable user ID for these devices.  This has been working fine.

I have set a rule so that the

...

BobW by L4 Transporter
  • 1914 Views
  • 3 replies
  • 0 Likes

Resolved! Panorama: Is it possible to assign an admin role to a vsys?

In Panorama, is it possible to assign an admin role to a vsys? I don't see the option on the admin role tab in Panorama. I only see it on the device itself. Please see attached screen shots as a comparison between the Panorama view and the Device vie

...

bbsoc by L2 Linker
  • 3279 Views
  • 2 replies
  • 0 Likes

Resolved! Has anyone ever seen this on the physical interfaces.

Was working for a while the the interface decided to go down and I kept getting this warning every time I commit.  I have checked both ends and it seems to me that the 10gig interface on the palo side is bad.  Both are the same so I do not understand

...

way to overpass the report limitation to TOP 500?

Hi,

I need to know how many users access Category Social Network.

So i do a trafic report  with SESSIONS and SOURCE USER.  Top 500.

I have all i need, BUT i have more then 500 users. so i cannot know how many users access that category.

I have to calcula

...

Resolved! PA200 process running at 100%

Hi there,

I've seen a task called pan_task taking up 100% cpu on two of my PA200's. Is this a PA200 specific thing? Not seen this on any other hardware platform, looking into it further it does not look like it's actually using 100% CPU, wondering if

...

Ante by Not applicable
  • 5075 Views
  • 3 replies
  • 0 Likes

Which logs to check for firewall auto reboot?

Hello,

I need to go through the logs to check why the active PAN 2020 rebooted itself. I only have access to the cli (I have to ssh via the now active FW).

Which logs should I check?? Under mp-log there is a whole bunch of logs I am not sure which one

...

BTS_MS by L2 Linker
  • 8817 Views
  • 3 replies
  • 0 Likes
Top Liked Authors