General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

 

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

jforsythe by Community Team Member
  • 298 Views
  • 0 replies
  • 0 Likes

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 3642 Views
  • 2 replies
  • 14 Likes

Resolved! External CA Management Certificate

Hello

Is it possible to use an external certificate from our corporate CA for the SSL Management Interface of the firewall?

I have already Imported it, and the corporate root certificate, but I don't know how to change the management interface configur

...

Resolved! Combining policies from different virtual systems

So we are migrating from ASAs to PA 5050's.  We are trying to do it with as little interruption as possible so what we did is put the PAs inline behind the ASAs using vwire.  Our thought is to build our 4 environments as separate virtual systems in o

...

Brinkman by Not applicable
  • 1691 Views
  • 1 replies
  • 1 Likes

Resolved! Firewall Configuration Essentials 101 Exam Retake Help

The end of last year I took the Firewall Configuration Essentials 101 v.4.1 exam. I didn't pass so I've spent some time studying and playing with Palo Altos. I returned to retake the exam and it doesn't show up under pending evaluations and I request

...

Resolved! Blocking lists of IPs

I'd like to block a list of IP addresses based on the ZeuS IP Blocklist.  What is the best/preferred method for doing this on the Palo Alto?  Thanks

sconley by Not applicable
  • 5174 Views
  • 5 replies
  • 1 Likes

Resolved! about control softether

Hi All,

We would like to control softether with PA5020 which runs PanOS 4.1.10, but we can not find keyword "softether" in the applications.

Anyone knows how to control softether in the PA fw?

Thanks.

Regards,

Joy

Resolved! Manually trigger a logevent for a threat or a rule?

There is a test-command one can use in the CLI to identify which security policy a specific packet will hit.

But is there also a command to issue a log-event?

For example when you are about to manually configure triggers in your logserver to react on -

...

mikand by L6 Presenter
  • 1807 Views
  • 2 replies
  • 0 Likes

Resolved! Need help with BGP in Active/Active HA

We have a pair of 5520's in Active/Active mode at a colocation facility.  The colocation facility is handing off to us 2 separate LC fiber connections, each has it's own public /30 address but utilize the same AS number for our BGP.  We have a /24 fr

...

Commit failure 4.1.10

After my Palo Alto 2050 in HA active/passive is up for about 1 week, I begin to get errors committing policies.

Management server failed to send phase 1 abourt to client logrcvr

Management server failed to send phase 1 abourt to client sslvpn

Management

...

EdwinD by L3 Networker
  • 4330 Views
  • 8 replies
  • 0 Likes

Resolved! The hunt is on - 0day for java 1.7u10

How many hours/days will it take for:

1) Wildfire customers

2) Regular customers

to get protected by a threat-db update regarding the latest 0day exploit for java 1.7u10 (and possible java 1.6u38) as descibed in:

Malware don't need Coffee: 0 day 1.7u10 s

...

mikand by L6 Presenter
  • 5654 Views
  • 14 replies
  • 2 Likes

Resolved! Upgrade Palo Alto version

Hi,

I have 2 problems:

1) I refresh the Software in my Palo Alto and i cant see the new versions 5.x. The last version that i can dowload is 4.1.11. Why i can refresh the new releases????? I attached a screenshot with the error and the succesfull conne

...

Resolved! Problem LDAP

Hi I have a problem with my firewall palo alto. I hope you can help me

I had configured an LDAP server (Active Directory) in my Palo Alto. Also I had created two Atuhentication profile. One for VPN access and another for the administration of Palo Alt

...

QoS

Hi,

Please help me out with the below issue and relevant links to configure QoS also will be helpful.

I have configured QoS Profile for class 8 traffic. and QoS Policy .. and then assigned the QoS Policy to an physical interface.

I have initiated some c

...

HA and stateless connections...

Ok, I have what may be a newbie type question, but it is one that I wanted to ask.

In the PA 201 class, they teach for HA, that stateless connections are not synched.

What is considered a stateless connection?  I do not think it would be UDP traffic (a

...

scantwell by L4 Transporter
  • 2445 Views
  • 4 replies
  • 0 Likes
  • 24182 Posts
  • 100 Subscriptions
Top Liked Authors
Labels