This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Unable to connect Global protect portal,..

Hi All,I am able to download GP client software, But using the same credential not able to connect to portal, giving error : portal error - unable to connect to portal. Only through one machine i am able to connect to portal using same credentials what i have used for others.Thank you,.Regards,Gururaj

Gururaj by • L4 Transporter
  • 2603 Views
  • 1 replies
  • 0 Likes

Resolved! Tunnel Interface IP Address

Can somebody explain to me the need for the tunnel interface IP address? Apparently a VPN tunnel requires a tunnel interface configured with an IP address when using dynamic routing. Is that a dynamic gateway the PA is connecting to or the PA is using a dynamic IP? Also, does this IP address have to live on the same network as the local network?...

Resolved! what is standard port of ms-dtc app-id?

Hello.I checked that ms-dtc standard port is tcp 139 on applipedia. I created couple of security rule for ms-dtc app-id and one was applied application-default at service column and other was applied specific service port tcp-49210, tcp-49217, tcp-49291.Unfortunately PAN warned shadowing rule for above security rules. I believe that ms-dtc app-i...

Roh1 by • Not applicable
  • 6204 Views
  • 3 replies
  • 0 Likes

Resolved! SNMP request failed

Hi, I try to request to PA-5020 with S.O. 1.4.7 some snmp traps for extract certain information about fo temp, cpu used, max sessions, etcetera.But when i try to extract the information since my snmp tool called snmpcheck the result is "Request Failed"I try too extract the snmp traps with the graph tool called MRTG but the result is the same, "R...

Juniper ScreenOS VPN to PANOS

I have a Juniper firewall with ScreenOS 6.2 that I am attempting to build a LAN to LAN VPN tunnel to a PAN firewall with 4.1.10.A quick overview of my setup. We have to frequently setup networks that are "mobile" for company meetings or whatever. We essentially take a network in a box and plug the Juniper into the internet. Because of this the J...

Is it possible to enable DHCP-Server on Management Interface?

Hi, I would like to know, if there is a way to enable DHCP-Server on management interface? We are using another interface for management so we could enable DHCP-Server on the dedicated management interface. In case of need we can establish a physical connection between the management interface and a laptop.

Dynamic updates download but not install on HA

We've got an HA pair of 5050s. They both have a job to download and install dynamic updates at 12:00 AM.I've seen occasions where one of the boxes will download but not install the update. They are also set to push a version of the update to the HA peer.I"m wondering if having them check at the same time and try to push to each other is not id...

aglej by • Not applicable
  • 2736 Views
  • 1 replies
  • 0 Likes

Resolved! Device Group and Template admins in Panorama 5.0

After upgrading Panorama to 5.0 I can't find the option to limit access for an administrator to a specific device groups or templates in the webgui. In 4.1, it was possible to configure this under "Administrators" in the device tab. This option seems to be missing in 5.0.(see attached screen shot)In the CLI I am able to configure it, but I can't...

torm by • L4 Transporter
  • 3213 Views
  • 2 replies
  • 0 Likes

Approach to manage FTP

Based on recent research by Palo Alto there appears to be a greater emphasis needed on managing FTP. What approach have you found most easily to deploy? The two options I can think of are:1. Controlling who can do FTP2. Only allowing FTP access to trusted FTP sitesAny thoughts or ideas appreciated. Phil

HITSSEC by • L4 Transporter
  • 2667 Views
  • 2 replies
  • 0 Likes

Resolved! Could M-100 support shared policy of panos 4.1 device?

Hello.I wonder about M-100 could support shared policy of panos 4.1 device or not. I tested about that and M-100 could not sync of shared policy for panos 4.1 device but panos 5.0 device is doing well.Thanks.Regards.

Roh1 by • Not applicable
  • 2794 Views
  • 2 replies
  • 0 Likes

Custom URL Filtering

Hi AllI am trying to get customer URL filtering working and it's not making much sense to me.What I need to do is protect the Exchange server by allowing only connections to OWA and not ECP etc.I've created a Customer URL Category called 'OWA Sites' and listed the following as sites (note there are no external URLs to go off as the external URL ...

TDC by • L1 Bithead
  • 5319 Views
  • 3 replies
  • 0 Likes

LDAPS TCP-636 shows as SSL

Im creating a rule base to limit port access to a Domain Controller in a DMZ. I want to allow TCP/636 (or LDAPS) to this server as well as a group of other applications.The only problem is that there is no LDAPS application defined. The application LDAP is defined as TCP/389 as it should be. LDAP also has TCP/636 defined but the PA does not iden...

jhickey by • L3 Networker
  • 10056 Views
  • 1 replies
  • 2 Likes
  • 24450 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks