This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! SCP Config backup "No DSA host key"

Hello,After upgrading both firewalls and the panorama to version 5.0.4, I want to change the configuration backup in Panorama.I want to change it from FTP to SCP.I am using the tool WinSCP on an windows machine. In this tool i've created an account called "Panorama" with a password.At this account I also mapped an ssh host key.But a test at the ...

ppater by • Not applicable
  • 4643 Views
  • 2 replies
  • 0 Likes

New Feature Request

I don't know if this would be classified as a new feature, but it would be nice if on the policies/security if there was a separation of the inbound rules and the outbound rules. Right now these rules are all thrown in the same view.

snormoyle by • Not applicable
  • 5090 Views
  • 7 replies
  • 0 Likes

Resolved! Nat with loopback int ip

HI all,Could we do the nat with loopback ip?I facing a scenarios my customers wish to set their public ip at loopback ip. Internal ip will nat to the loopback ip and send to cloud with external interface.

afiq by • L1 Bithead
  • 7233 Views
  • 1 replies
  • 0 Likes

Resolved! MIB for 5.0 PAN

HelloI'm trying to monitir traffic on my PA 200. I found tech doc There is stated that I need MIB file for my PAN. I'm using 5.0.3 and there isn't anyt 5.0 MIBs.Where I can find it?I found also but maybe someone can share their config file? it could save many time to me and others.RegardsSLawek

_slv_ by • L4 Transporter
  • 3102 Views
  • 2 replies
  • 0 Likes

Captive Portal - users not supplying domain info

Our captive portal is configured to use RADIUS (Cisco Secure ACS) to authenticate our AD users. The Cisco ACS will authenticate a user even if they do not include their domain information in the userid string... 'userid' rather than 'domain\userid'. The problem with this is that a user who authenticates with only their userid ends up with a ip-...

Jeff_K by • L2 Linker
  • 4018 Views
  • 3 replies
  • 0 Likes

Resolved! 5060s SFP ports

Hello,I have one 5060s and I would like to know what types of fibre can support. Unfortunately I couldn't find any info in the hardware doc. Can support LX or SX fibres?Many thnaks,Thomas

BOOMMAX by • Not applicable
  • 3982 Views
  • 2 replies
  • 0 Likes

Resolved! GlobalProtect 3G issue on Windows 8 pro tablet

Hi,we installed GP 1.2.1 on a Windows 8 32 bit pro tablet (thinkpad 2). With WiFi it works perfectly but when we use 3G, we can't even open the Portal website in the Internet Explorer and the GP client can't connect. I thought it could be a problem with the certificate but then it would not work with WiFi?

sboelter by • L1 Bithead
  • 6092 Views
  • 5 replies
  • 0 Likes

Virtual Routers

Hi,I have the WAN it's vlan 9 with the IP x.x.9.1 and I have to give access to vlan 6 which is the part of users, the Palo Alto must make the routing, vlan 6 has the IP's: x.x.6.0/24, x.x.109.0/24, which should go out x.x.6.254.How can I do routing with the virtual routers?Thanks.Regards.

Angel by • Not applicable
  • 2200 Views
  • 1 replies
  • 0 Likes

Resolved! Dynamic Updates using an Interface with dynamic IP address

Hi,I would like to know how to configure the Palo Alto Updates in Service Route Configuration using an interface with dynamic ip address?When I´m using dynamic ip the interface doesn´t appear in Device -> Setup -> Services -> Service Route Configuration.Thank you and regards,

rrunge by • Not applicable
  • 3736 Views
  • 1 replies
  • 2 Likes

Resolved! AD group for administratoin using authentication through LDAP

I'm trying to authenticate an AD group for administrative access for our PA. I'm missing the last step to implement it and I may have some of the steps messed up. could someone fill in the blanks for me?Create an LDAP profileCreate an authentication profile???Sorry if this question has been covered before.Thanks

What am I doing wrong? This policy to block unknown traffic to countries outside the US.

Hi all!I have a new policy that I pushed yesterday that was a total failure and any help you can offer would be appreciated.We have a policy that looks like this:Source <Internal IP addresses>Destination <Negate Region US>Application <unknown-tcp, unknown-udp>DENYHowever, it is catching and DENYing all unknown-tcp and unknown-u...

Resolved! Problem with Panorama

Hi all,I am using Panorama 5.0.4. I have two device groups and let's say two administrators.Is it possible to grant Admin A RW permissions to Device Group A and RO to device Group B, using the same login?How can this be achieved?Any help would be appreciated.

polbank by • Not applicable
  • 2261 Views
  • 1 replies
  • 0 Likes

Resolved! PA-2050 and Juniper SRX reth config

There some problems with connection user to Juniper SRX through PA-2050.The exercise is to make L2 connection between Wifi user to Juniper SRX through Palo Alto.Please give some advice to make this configuration in Palo Alto.I have no many experience this PA.Thanks in advance.

Ulugbekyu by • Not applicable
  • 3240 Views
  • 2 replies
  • 0 Likes

Resolved! Could IPsecVPN use PBF instead of routing?

Hello guys.I have a question about IPSEC VPN tunnel and is IPSEC VPN can use PBF instead of routing or not.I think that tunnel interface could have ip-address (for tunnel monitoring) so I guess IPSEC VPN tunnel could use PBF instead of routing?!So I tested about that but its faild. so I wonder about it caused my missed configuration or PAN could...

ttongfly by • L3 Networker
  • 4897 Views
  • 4 replies
  • 0 Likes
  • 24430 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks