General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Type=Deny while Action=Allow

When opening iOS Facebook app I''m unable to play a movie... however, from the same device if I login to facbook via browser I can play the video.I'm trying to find out why the iOS App is getting blocked, as my policies clearly allow it.Rule iPhones: Iphone Rule allowing all traffic Log when using Facebook via Chrome Log when using Facebook v...

iPhone Policy.JPG
Traffic Allowed.JPG
Blocked Traffic.JPG
Decryption Policy.JPG
Hwinter by L2 Linker
  • 22335 Views
  • 4 replies
  • 1 Likes

Palo Alto Clearpass integration disconnecting

We are looking to utilize Cleaspass sending information to ours Palos for the purpose of user-id. We have this applied in some test groups but we are running into an issue where after a few days the connection appears to time out and the Palos stop received user-id information from Clearpass. There are no errors in the Palos system logs, Clear...

Claw4609 by L5 Sessionator
  • 1789 Views
  • 2 replies
  • 0 Likes

Resolved! PAN NGFW carbon footprint

Hello, I'm searching for informations about environmental impact of NGFW. Is there a benchmark for the carbon footprint of Palo Alto physical firewalls?Measurements such as the footprint of the production of a firewall, daily electricity consumption? Thanks for your help.

Panorama MGMT interface option - Public IP ?

Hi Question about configuring Panorama management interface. Why is there a "Public IP" under the management interface? "IF" we would set a public IP on the panorama, dont we configure it under IP Adress + Netmask + gateway? Why is there a "Public IP" option field first? I searched and read the guides but nothing about a public ip is spoke...

AnderSL by L1 Bithead
  • 2273 Views
  • 2 replies
  • 0 Likes

Resolved! Find the source for "DNS amplification attack response"

Hello, We receive many "DNS amplification attack response" alerts with the source of our internal DNS servers toward public DNS servers on the Internet. How can we know whether these alerts are not false positives and if they are true positive, how to find the main endpoint responsible for this type of attack? Thank you all 🙂

Help support

Dear Palo alto family, I face some difficulty to ping internet on DMZ , i am trying to configure a security policy DMZ_to_Public/ WAN but still i didn't ping 8.8.8.8 in DMZ switch and didn't ping in firewalls itself also. Help me to solve this issue pls

Zola12 by L1 Bithead
  • 1837 Views
  • 3 replies
  • 0 Likes

Resolved! eventid eq tunnel-status-up/down

Hi Team, We run the command eventid eq tunnel-status-up / down but we dont see any output under Monitor>system. What is the reason? two days back we see the went down and see the DPD log as well but still no result for subjected command please suggest.

shirishkulkarni_0-1714376236358.png
shirishkulkarni_1-1714376355230.png

How to make white list policy on file blocking palo alto

I have Palo Alto PA - 5520 Series when the user uploads a file, I want palo alto just allow file in jpeg, png, xls, xlsx, pdf type. and blocking other file types. because my server has an incident, it receive file type phar and php (malicious file) but palo alto didn't block this file because Palo Alto alto didn't have phar file type. so I wa...

Deactivate BFD option

Hello, I need to disable the BFD option, can anyone tell me the best steps to follow? I also need to know the implications that may occur when I disable the BFD option. thanks

Alpalo by L4 Transporter
  • 3987 Views
  • 5 replies
  • 0 Likes

Group Based network policy not being blocked.

Hello, I have an openldap server setup as well as an LDAP policy and group mapping on the Palo Alto firewall. When I run the 'show user group name "cn=employees,ou=groups,dc=brillnet,dc=com". I can see the users in the group just fine. Refer to the output below. I am using the UserID xml api to associate group/user to ip mappings. Calls...

edlyle_0-1714159919760.png
edlyle_3-1714159961648.png
edlyle_4-1714159989788.png
edlyle by L0 Member
  • 2090 Views
  • 2 replies
  • 0 Likes

Resolved! User Type requirement for PCNSE exam

Hello,I was wondering if anyone can help regarding the User Type required before scheduling PCNSE exam with Pearson VUE. The options are 1) Customer, 2) Partner, 3) Academy and 4 Palo Employee and I really have no idea what I am supposed to pick. My Palo account is linked to my gmail email address, as I have no intention "locking" my certificate...

Unable to add virtual disk to Panorama

Hello, We are running Panorama VM release 8.1.8 un Panorama mode.We have a 2 TB disk for logging and we would like to add a second 2 TB disk.The new virtual disk has been added to the VM, and after reboot is seen as sdb in Panorama (sdc is already working) : > show system disk detailsName : sdbState : PresentSize : 1887436 MBStatus : Mig...

  • 24410 Posts
  • 125 Subscriptions
Top Solution Authors
Labels