This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4117 Views
  • 0 replies
  • 0 Likes

Resolved! New Palo Alto User - Dynamic Block List

Hi there,I just got a new Palo Alto and I would like to load some IPs in a Dynamic Block List. I have set up a Windows IIS Webserver on an old Server 2003 box with an IP 192.168.1.33 I have the site up and working and anoymous users can connect to it by going to http://192.168.1.33/test.txt. The document test.txt and is formatted like so:192....

dmodien by • Not applicable
  • 5127 Views
  • 5 replies
  • 0 Likes

Resolved! PAN OS 5.0 and AD authentication problem

Hello I have a little problem with my PA-5020. After upgrading OS to a 5.0 version my user authentication to log on as an administrator from ldap and kerberos doesn`t work. I had user mapped to an allowed list by AD group: cn=administratorzy paloalto,ou=urzĄdzenia,ou=grupy zasobÓw,dc=my,dc=domain,dc=name, it was working fine with os 4.X but aft...

Resolved! User Activity Report Size Limitation

Is there some built-in limitation as to the maximum size of any given User Activity Report? It seems to max out at around 120 pages and just stops at that point, even when there is plenty more data to report on. Has anyone else experienced this? Any way around it? Thanks!

shopeman by • Not applicable
  • 5962 Views
  • 7 replies
  • 0 Likes

Reverse direction in threat logs

When looking at the threat logs the vulnerability for spyware shows my servers as the attacker in the outbound direction. I have an inbound/outbound anti spyware policy and it caught jboss trying to access my network. Why does it show my servers as the attacker in the logs when the connection was initiated from the outside?

das by • Not applicable
  • 3230 Views
  • 3 replies
  • 0 Likes

Multicast Packets forwarding

Hi Guys,Looking for some help!Quick simplifiy overview of the setup.PA is the DHCP Server for two subnets:Subnet A10.101.0.0/16Subnet B10.102.0.0./16All wireless clients are in subnet A conencted via seperate enterprise Wireless LAn Controller and Apple TVs also connected to the same WLC are in Subnet B. Subnet A and B and in seperate VLANs (V...

JAG by • L1 Bithead
  • 10902 Views
  • 9 replies
  • 0 Likes

GlobalProtect - Windows agent not allowing internal access, but iPhone built-in does?

PAN version 5.0.4, GP client version 1.2.2. GlobalProtect is set up with a loopback address on both the portal and gateway, and they share a 3rd party cert. I can access the portal, and download the client on a Windows machine. I need to get this up and running as it's replacing my current VPN solution, and this has to be working before I rol...

uscit by • Not applicable
  • 3647 Views
  • 2 replies
  • 0 Likes

Login failure notification

I am looking for a method to send a notification by email when authentication to the firewall management is attempted but fails. It would be acceptable to get an email for successful authentications as well. Overall I am looking for methods to help ensure someone isn't trying to gain unauthorized access and be notified when potential unauthori...

bogleric by • Not applicable
  • 3924 Views
  • 2 replies
  • 0 Likes

Resolved! GlobalProtect Port 80 ,443 Incomplete

HiI'm Trying to set an enviorment to my mobile users (Laptops of Salesman), I used the Globalprotect to provide a secure tunnel to the office Firewall andthen gave the users access to terminal server, and it worked fine.last week we installed a new SharePoint Server, I need to give the users with laptops direct access to my SharePoint ServerI us...

ShayBar by • L1 Bithead
  • 13090 Views
  • 11 replies
  • 0 Likes

Resolved! Cisco Guest Wireless - Issues?

Hi all,I recently installed a PAN 5050 cluster in-line between my internal Cisco Wireless Controllers and the DMZ guest access mobility controller and saw the control and data paths flap constantly. I put in an application override rule (along with a number of other measures not related to PAN) and the behaviour seemed to stop. Can anyone conf...

Packet Capture (VLAN)

How can i capture the packets for only one VLAN? I have a virtual Interface ethernet1/6.40 and if i use a filter for only the interface (ethernet1/6) the PA doesn't capture anything.

Data Filtering / URL Logs into Splunk

Hey Guys,I have the Palo Alto App working for the Threat/Traffic Logs.However, I would like to do the same for the Data Filtering / URL Logs.Is this possible?Let me know if it is and how to do it.Thanks.Brian

ikinnexi by • Not applicable
  • 6926 Views
  • 3 replies
  • 1 Likes

Youtube video seen as http-audio application

Greetings,We have run into an issue in our deployment where SOME (really only a few) Youtube videos don't play, the user gets an error 'An error occurred, please try again later'. In the traffic logs, I see traffic that is recognized as application 'http-audio'. We have configured an application whitelist of the applications we allow from our ...

  • 24334 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks