This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Github over 443? How do I allow on specific policy?

We have a specific rule to allow github based on PAN EDL of github v4/v6 addresses. Git works over port 22 but not over 443 with the policy below. I want to allow git over 443 on the policy below but not clear on the best way to do it. Do I need to specify service as ports 22 and 443?

drewdown_0-1716298330250.png
drewdown by • L4 Transporter
  • 3925 Views
  • 2 replies
  • 0 Likes

Resolved! Global Protect VPN session keep disconnecting.

For PA firewall, I set GP inactive session 30mins. In user experienced session keep disconnected every 30 mins although client connected VPN and working on the remote PC. How can i overcome it?

HeinHtet by • L0 Member
  • 2700 Views
  • 2 replies
  • 0 Likes

Moving BGP from Juniper router to PA 5410

Hello, I'm planning to remove some older Juniper MX routers from the network edge and move the BGP peer configuration to an Active/Passive pair of 5410s. There are two ISPs. For now I'm just hoping to replicate the Juniper setup on the PAs. Right now the PAs statically route traffc to the Juniper where the BGP peers are configured. I want...

Resolved! Verdict "malicious" and action "allow"

Hi team We are detecting some files with Verdict "malicious" and action "allow" Can anybody help us for change the action or other solution? Regards

Alpalo_0-1715594709155.png
Alpalo by • L4 Transporter
  • 3787 Views
  • 3 replies
  • 0 Likes

Resolved! VM-Series SKU End of Life question

Hi Guys so we have a client with a number of VM-100 FWs on Azure.. we recently migrated them from perpetual licenses over to NGFW Software Credits. so at the moment they are still running as VM-100 but with the flex licenses valid till 2026 now.. according to this the VM-100 series expires end of July 2024 https://www.paloaltonetworks.com/se...

PA_nts by • L4 Transporter
  • 5654 Views
  • 2 replies
  • 0 Likes

Resolved! INIT: Id "s0" respawning too fast: disabled for 5 minutes

Have installed Palo alto PAN7 on my VMWare Work station, after I log-in using credential witin a few minutes this message appears and not allowing to perform any actions. Message: --INIT: Id "s0" respawning too fast: disabled for 5 minutes-- Thanks in advance.

Source NAT Pool range use case practices

Hi Expert , I would like to consult about how can use Source NAT Pool range with multiple clients to source NAT pool can use DIPP ( Dynamic IP and ports) or Dynamic source nat actually I hesitate to use DIPP because I think suitable than dynamic source nat but I'm not sure correctly or not ? please suggest me Thank you

Download Failed

Model PA-440V 11.1.2-h3 We have GP agent 6.2.3 downloaded to our PA-440, but I have not had my Apple Mac updated to that version for several months. I can still connect to my office via GP VPN but my computer client is GP App version 6.1.3-703. When connected, GP tries download the latest version at startup and every 15-20 minutes thereafter. Th...

JCapron by • L1 Bithead
  • 3375 Views
  • 1 replies
  • 1 Likes

Various Commands on CLI returning Unknown

Anyone know why various commands such as "debug" would return "Unknown Command" on the CLI? Is this possibly due to my permissions on Panorama? These commands are relatively common and are even referenced in palo KB articles but they don't seem to work for me 😕

Restore Panorama from backup

We have issues logging back to panorama and error message is authentication profile missing. I have opened a case but to me it looks most likely we have to rebuild or factory reset it. We do have the daily configuration backup .tgz file which contains xml files. What is the procedure to restore it.

raji_toor by • L4 Transporter
  • 7253 Views
  • 2 replies
  • 0 Likes

Troubleshooting Panorama Push - line:51: syntax error [}]

When trying to commit to a ngfw from panorama I am getting this error. I have turned on debug for configd to try and find what specific setting has a problem. No luck getting more information. I have double checked every setting and variable for something not entered correctly with no luck. Is there a way to access that file and look at line 5...

I.Miller by • L0 Member
  • 2462 Views
  • 2 replies
  • 0 Likes

Errors in S2S VPN configuration.

Hello, I am configuring a site to site VPN between a Palo Alto Firewall and un Firewall Fortinet, but despite several attempts we are not able to get it to go up either in phase 1 or in phase two in the logs of Palo Alto you can see: 2024-05-16 23:47:12.205 +0000 [INFO]: { 3: }: received IKE request x.x.x.x[500] to x.x.x.x[500], found IKE gate...

M.Ochoa by • L0 Member
  • 2475 Views
  • 1 replies
  • 0 Likes

UnAuthorized Access -- CSP

Hello, I am not able to access the Customer Support Portal getting below error: UnAuthorized Access Your membership has expired or has not been approved, please contact Palo Alto Networks Support. I have contacted the NextWave <[email protected]> and they mentioned as below: I'm sorry but we are unable to assist with the ...

  • 24483 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks