This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! About ftp passive mode App-ID insufficient-data

Hi All,We find that if ftp runs passive mode and go through paloalto fw, in the fw monitor -> logs -> traffic, we'll see the application should be identified as insufficient-data.I also find that there are just few bytes for every logs in the Bytes column.Anyone knows how to explain those results ?

Resolved! Live site nav question

Newbie here wanting to know where to report site issues. I tried clicking on the info center link from the home page and got a navigation error. Thanks.

joehansen by • Not applicable
  • 3064 Views
  • 3 replies
  • 0 Likes

Resolved! Exporting traffic logs via CLI - scp

Is there a way to group by source or destination address from the cli. for example:scp export log traffic query "(port eq 514) and ( proto eq tcp ) and ( app eq insufficient-data ) or (app eq unknown-tcp)" start-time equal 2013/03/18@01:00:00 end-time equal 2013/03/26@01:00:00 to [email protected]:/home/orlando/unknown-tcp.csvThis returns tons of v...

opiedrah by • L0 Member
  • 11767 Views
  • 5 replies
  • 1 Likes

Resolved! 5.0.1.h1

what does this fix with 5.0.1, i noticed that it is not available for general download.

Destination user

Why does “Destination user” is coming up on my traffic logs? There is no description, Tab or filed on the policy rule where I can add.

wesa by • Not applicable
  • 3793 Views
  • 2 replies
  • 0 Likes

Resolved! SSL VPN with Client Certificate

HelloI want to use SSL VPN with Client Certificate.I will install CA server on MS Window 2008.I know CA server is installed 'Enterprise CA mode" or "Standalone CA mode".The Enterprise mode deliver Certificate to assist AD server.The Standalone mode deliver Certificate by 'Web enrollment'.I have questions.Is PaloAlto imported each Certificates po...

Resolved! Problem Blockin Linkedin - What is the best practice ?

Dears,I am stuck with this problem since the lasts 2 weeks...We have a default rule in our company blocking any social networking, but for some HR users, linkedin should be allowed.I am trying to make a rule to allow some users to access only the linkedin website.Decided this waysource zone > trustsrc add > anyuser > specific userdst zo...

Resolved! Routing between virtual systems

I have multiple virtual systems configured. They are visible to each other. I have policies and external zones in both systems. How do I get the firewall to recognise the packet is going to another virtual system?The documentation shows communication on a diagram with no share gateway. Is a shared gateway need to route traffic between virtual sy...

PThomas by • Not applicable
  • 33518 Views
  • 30 replies
  • 0 Likes

DHCP redundancy / HA solution with the PA (200) possible?

We are a very centralized company with a lots of decentralized business units.All these decentralized locations are connected to the HQ, but can run their primary business process withouth this connection.This is also a principle we use, so the "primary" proces must always run, even when the connection to the HQ is down.Now we're looking for a D...

Mass static route migration

I need to migrate about 600 static routes into a PAN box . Does anybody know how I can do this efficiently and quickly . My goal is to copy all the 600 routes into the running cofig .Thanks

usvi by • L3 Networker
  • 3099 Views
  • 3 replies
  • 0 Likes

Custom URL Category with Wildcards

HelloI have a question. www.example.com _________|_________ | |www.example.com/sales-team www.example.com/marketing-teamMy customer want function belowThe sales team access "www.example.com" and "www.example.com/sales-tea...

request restart software - Clarification ?

Newb question, but I can't seem to find the answer I'm looking for so I'll just ask..The command 'request restart software' is *JUST* the management software itself, like logging, ssh, snmp, etc, but does *NOT* affect any time of forwarding happening through the box (dataplane), correct?There is the command 'request restart dataplane' which is o...

steveo by • L3 Networker
  • 8062 Views
  • 4 replies
  • 0 Likes
  • 24403 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks