General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Planes

Is there a matrix or list of items that describes each of the plane functions? I know there is a management & data plane on the Palo but I'm not sure where to place the 'control' functions such as routing updates or switching path information and caching.For example, if you restart the mgmt plane, will this trigger HA failover? I am guessing...

das by Not applicable
  • 2976 Views
  • 1 replies
  • 0 Likes

Resolved! Can you hide the disabled policies?

First select all rules that are enabled and click on "Enable". This is needed to add the disabled field to the config(only visible in the cli).Next you can use the following filter in the Policy tab : (disabled eq 'no' )

jorisVD by L1 Bithead
  • 4982 Views
  • 1 replies
  • 3 Likes

Resolved! "Advanced View" in GlobalProtect Client won't be locked after version 1.1.6

Hi, all,In normal, "Advanced View" in GlobalProtect client will be locked if I configure to cancel "Enable advanced view" option in GlobalProtect Portal, and it will check the GlobalProtect portal information automatically after rebooting, so that client user cannot modify the settings easly.But after GlobalProtect version 1.1.6, I found it won'...

Resolved! GlobalProtect change password when expires

Does anyone know if there are any enhancements in version 5 where the GlobalProtect VPN client will prompt the user to change their password if it expires when using single sign-on with sources such as AD?

nthen by L3 Networker
  • 13328 Views
  • 1 replies
  • 0 Likes

Resolved! blocking media streaming and chatting

Hello,Today i blocked the media streaming but found media streaming is allowed from facebook website and also blocked the messengers but found messengers allowed except skype because we create a rule for skype.How to block all media streaming and all chatting in short way.Regards,

Resolved! Creating a Cisco ASA - Palo Alto VPN tunnel for ALL traffic

I have a Cisco ASA at a remote site and PAN 3020 at my HQ site. The current site-to-site tunnel is working well and remote users can access resources in my network. Now comes the tricky part. In a perfect world, I could put another smaller PAN unit there for AV, App Control, etc. but until then I need some way to control it since those users ...

nthen by L3 Networker
  • 7869 Views
  • 8 replies
  • 0 Likes

Resolved! Panorama 5.0 with 4.1 devices

We are running Panorama 5.0, but still have some managed devices running 4.1. According to release notes, Panorama 5.0 should be backward compatible with 4.1 devices.How does Panorama 5.0 treat 4.1 devices when it comes to template configuration? I know that templates are not supported in 4.1, but still it seems to me that some of the configurat...

torm by L4 Transporter
  • 4631 Views
  • 4 replies
  • 0 Likes

One way traffic over IPSEC tunnel

Hi All,Just having an issue with a newly created IPSEC tunnel on a new PA-500. I have tried 4 different devices at the remote end with the same results, so I'm really thinking my problem is due to mis-configuration at the PA-500 end.The tunnel comes up fine every time (Green lights), but I can only ever achieve traffic flow from Site B (remote...

Dual ISP's - How to PA-500

Does anyone know of any good documentation that explains how to set up dual ISP's into my PA-500 device? I currently have a single T1 running into the PA-500, but am going to be adding a cable connection within the next couple weeks. I would like to use the Cable Connection for all Internet surfing, and the T-1 for E-mail and such. Can this be...

kaysun by L1 Bithead
  • 12035 Views
  • 16 replies
  • 0 Likes

bandwidth use

I can see the live-time bandwidth by using the CLI:Show system statistics sessionBut that only shows the real time download bandwidth – it doesn't show our upload bandwidth. Is there a command to use to see this traffic instead or combined with our download bandwidth?I'd just like to see a real time readout of our bandwidth use inbound and outbound

wesa by Not applicable
  • 3253 Views
  • 1 replies
  • 1 Likes

How to apply Data Filtering effectively

It seems obvious to me that you can't simply apply the built in CC and SS filters in a Security Profile with an "any any". In my testing it really fouls up general web surfing.Why is there no detailed documentation (at least any I can find in KnowledgePoint or elsewhere) about how to craft an effective data filtering profile. Should it be applie...

CWillms by L2 Linker
  • 15238 Views
  • 9 replies
  • 0 Likes
  • 24452 Posts
  • 125 Subscriptions
Top Solution Authors
Top Liked Authors
Labels