General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Exporting traffic logs via CLI - scp

Is there a way to group by source or destination address from the cli. for example:scp export log traffic query "(port eq 514) and ( proto eq tcp ) and ( app eq insufficient-data ) or (app eq unknown-tcp)" start-time equal 2013/03/18@01:00:00 end-time equal 2013/03/26@01:00:00 to [email protected]:/home/orlando/unknown-tcp.csvThis returns tons of v...

opiedrah by L0 Member
  • 11839 Views
  • 5 replies
  • 1 Likes

Resolved! 5.0.1.h1

what does this fix with 5.0.1, i noticed that it is not available for general download.

Destination user

Why does “Destination user” is coming up on my traffic logs? There is no description, Tab or filed on the policy rule where I can add.

wesa by Not applicable
  • 3810 Views
  • 2 replies
  • 0 Likes

Resolved! SSL VPN with Client Certificate

HelloI want to use SSL VPN with Client Certificate.I will install CA server on MS Window 2008.I know CA server is installed 'Enterprise CA mode" or "Standalone CA mode".The Enterprise mode deliver Certificate to assist AD server.The Standalone mode deliver Certificate by 'Web enrollment'.I have questions.Is PaloAlto imported each Certificates po...

Resolved! Problem Blockin Linkedin - What is the best practice ?

Dears,I am stuck with this problem since the lasts 2 weeks...We have a default rule in our company blocking any social networking, but for some HR users, linkedin should be allowed.I am trying to make a rule to allow some users to access only the linkedin website.Decided this waysource zone > trustsrc add > anyuser > specific userdst zo...

Resolved! Routing between virtual systems

I have multiple virtual systems configured. They are visible to each other. I have policies and external zones in both systems. How do I get the firewall to recognise the packet is going to another virtual system?The documentation shows communication on a diagram with no share gateway. Is a shared gateway need to route traffic between virtual sy...

PThomas by Not applicable
  • 33814 Views
  • 30 replies
  • 0 Likes

DHCP redundancy / HA solution with the PA (200) possible?

We are a very centralized company with a lots of decentralized business units.All these decentralized locations are connected to the HQ, but can run their primary business process withouth this connection.This is also a principle we use, so the "primary" proces must always run, even when the connection to the HQ is down.Now we're looking for a D...

Mass static route migration

I need to migrate about 600 static routes into a PAN box . Does anybody know how I can do this efficiently and quickly . My goal is to copy all the 600 routes into the running cofig .Thanks

usvi by L3 Networker
  • 3125 Views
  • 3 replies
  • 0 Likes

Custom URL Category with Wildcards

HelloI have a question. www.example.com _________|_________ | |www.example.com/sales-team www.example.com/marketing-teamMy customer want function belowThe sales team access "www.example.com" and "www.example.com/sales-tea...

request restart software - Clarification ?

Newb question, but I can't seem to find the answer I'm looking for so I'll just ask..The command 'request restart software' is *JUST* the management software itself, like logging, ssh, snmp, etc, but does *NOT* affect any time of forwarding happening through the box (dataplane), correct?There is the command 'request restart dataplane' which is o...

steveo by L3 Networker
  • 8116 Views
  • 4 replies
  • 0 Likes

PA random packet captures

I've noticed that our 5020 is taking (what seems like)random packet captures. I searched this forum about this, and have read that the PA does do packet captures if the traffic is identified as "unknown-tcp" and "insufficient-data". The traffic I see that is generating pcaps seems random. For example, there are pcaps for "ciscovpn", "apple-pu...

jambulo by L4 Transporter
  • 2953 Views
  • 3 replies
  • 0 Likes

SSL decryption - File blocking problem IE v8

I have a file blocking policy defined to block specific attachments via external web mail portals. I get correct matches for the application and also get successful SSL decryption. My problem is that Internet Explorer v8 clients can still send the attachments even though they show up as "deny" in the logging. The Mozilla Firefox or Google Chr...

  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
Labels