This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

How to add a PA5050 to OPManager?

Hello..I have a PA5050, and i'd like to add a PA-5050(PNAOS Ver. 4.1.9) to an OPManager. It only shows a health status after completed to add a PA5050 on an OPManager. That mean is not showing a CPU, memory and other information on the OPManager. (MIB Version is 4.1)Dose a MIB of PA-5050 not support a CPU, a memory monitor throughout the OPMana...

willstech by • L3 Networker
  • 4042 Views
  • 2 replies
  • 0 Likes

GlobalProtect Gateway authentication

HelloI've noticed that the username used witch GlobalProtect Client is truncated when it has a prefix that ends with "\"It thought it could be removing the domain as I started checking witch domain\usernameBut it tried other stirngs and it happens the same:lalakers\usernameharrypotter\usernameskywalkers\usernameIs it by design? Is it possible t...

Secondary VPN peer / IPsec gateway?

I would like to configure one of our VPN tunnels to use a secondary peer IP to failover to in the event the primary goes down. So far I haven't been able to figure out how to do this by poking around in my tunnel configuration, and I can't find any documentation online or in the admin guide. I know you can do it on other firewall platforms, but ...

Resolved! PA HA Licensing

Hi,Is it possible to have two PA configured in an Active-Passive scenario with different set of licenses.1st appliance:Threat PreventionURL Filtering2nd appliance:Threat Prevention.Also, is there a different pricing criteria if the license is for the passive box?Thanks

rsaber by • L1 Bithead
  • 5358 Views
  • 2 replies
  • 0 Likes

Resolved! Intermediate certs for SSL-VPN portal

Hi!I am using a DigiCert certificate for the SSL VPN portal and the management interface, and it all works well with most browsers. However the certification chain requires an intermediate CA to be trusted/sent as well, and I haven't managed to get that to work on the PAN-box.It's not a big issue as most browsers seem to be able to resolve the c...

Creating Custom Reports on Panorama 4.1.7

I'm having trouble scheduling a custom report, I get the email but the report is blank, not sure what I'm doing wrong.I followed the instructions per documentation, I created a Report Group, as well as an email Schedule and when i'm within Custom Report if I say run now it runs and I get data back; but when it's scheduled to get emailed I do not...

netinfra by • L0 Member
  • 2340 Views
  • 1 replies
  • 0 Likes

SSLVPN is disconnecting automatically

SSLVPN is disconnecting automatically and after some time it is connecting back automatically. I checked all the logs but nothing is showing related to disconnection.please help me to solve this issue.

Resolved! Is there any way to get the sites visited in the "User Activity Report"?

• Using the module "User activity report" provides information on sites that are blocked for a user by a PA rule. If a user matches any blocked site, then this information comes in white. • To understand the behavior of a user, using a "Custom Report" with some parameters.My question is whether there is any way to get the sites visited in the "...

Have managed to break Google Play and Apple App store downloads

HiAt some point in the last month or so, I've managed to break downloads from both the Google Play store and Apple App store. But I don't know how. I have enabled decryption, but have disabled all my decryption rules and it is still broken - So I assume it's not that.I can't find any associated denied traffic in the traffic log, or in the URL f...

High CPU Usage in Panorama V5.0.4

Hi I am seeing the process pan_summary_gen clocking up 80-100% CPU at regular intervals for a few minutes at a time. Is this a known or should I report it?

djr by • L4 Transporter
  • 5430 Views
  • 8 replies
  • 0 Likes

Windows Surface 8 RT and Ipsec support?

Do we have any support or articles on this subject or to make this work properly over ipsec and vpn? I know there are articles for Android and Apple but have not seen any information on Microsoft Surface RT platform support on this website.

Application Dependency PAN-OS 5.0.0 more

Hi~Since more PAN OS 5.0.0 has upgraded application dependencyand then I added one rule from securityI would like to allow to only gmail-baseand then Click commitI expected sucesse result,,but Popup window represented warning message;;what -_-;;I knew that PAN-OS support Application Dependency about http, ssl, somethig like thatI red PAN OS 5.0....

2050 only handles 1/4 of its advertised throughput

Has anyone here tried to benchmark there Palo Alto Firewalls? We are using Breaking Point(same company that Palo Alto uses)to test our Lab 2050's. We have come to the conclusion that the PA 2050 starts dropping packets at about 250Mbps(with about 5-600 new sessions per second). This is with Threat Prevention disabled. The 2050 is spec'd out t...

jambulo by • L4 Transporter
  • 8791 Views
  • 11 replies
  • 0 Likes

Resolved! unknown-tcp / udp - please explain

Hi,I know that these two applications stand for unrecognized traffic. It worries me though that for some of the other applications to work, I have to add unknown-tcp/udp to the firewall rule. Example for this would be Bittorrent traffic. To allow Bittorrent, I also have to allow web-browsing and unknown-tcp and unknown-udp.Can someone please ela...

  • 24431 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks