This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Exporting traffic logs via CLI - scp

Is there a way to group by source or destination address from the cli. for example:scp export log traffic query "(port eq 514) and ( proto eq tcp ) and ( app eq insufficient-data ) or (app eq unknown-tcp)" start-time equal 2013/03/18@01:00:00 end-time equal 2013/03/26@01:00:00 to [email protected]:/home/orlando/unknown-tcp.csvThis returns tons of v...

opiedrah by • L0 Member
  • 11901 Views
  • 5 replies
  • 1 Likes

Resolved! 5.0.1.h1

what does this fix with 5.0.1, i noticed that it is not available for general download.

Destination user

Why does “Destination user” is coming up on my traffic logs? There is no description, Tab or filed on the policy rule where I can add.

wesa by • Not applicable
  • 3827 Views
  • 2 replies
  • 0 Likes

Resolved! SSL VPN with Client Certificate

HelloI want to use SSL VPN with Client Certificate.I will install CA server on MS Window 2008.I know CA server is installed 'Enterprise CA mode" or "Standalone CA mode".The Enterprise mode deliver Certificate to assist AD server.The Standalone mode deliver Certificate by 'Web enrollment'.I have questions.Is PaloAlto imported each Certificates po...

Resolved! Problem Blockin Linkedin - What is the best practice ?

Dears,I am stuck with this problem since the lasts 2 weeks...We have a default rule in our company blocking any social networking, but for some HR users, linkedin should be allowed.I am trying to make a rule to allow some users to access only the linkedin website.Decided this waysource zone > trustsrc add > anyuser > specific userdst zo...

Resolved! Routing between virtual systems

I have multiple virtual systems configured. They are visible to each other. I have policies and external zones in both systems. How do I get the firewall to recognise the packet is going to another virtual system?The documentation shows communication on a diagram with no share gateway. Is a shared gateway need to route traffic between virtual sy...

PThomas by • Not applicable
  • 33983 Views
  • 30 replies
  • 0 Likes

DHCP redundancy / HA solution with the PA (200) possible?

We are a very centralized company with a lots of decentralized business units.All these decentralized locations are connected to the HQ, but can run their primary business process withouth this connection.This is also a principle we use, so the "primary" proces must always run, even when the connection to the HQ is down.Now we're looking for a D...

Mass static route migration

I need to migrate about 600 static routes into a PAN box . Does anybody know how I can do this efficiently and quickly . My goal is to copy all the 600 routes into the running cofig .Thanks

usvi by • L3 Networker
  • 3146 Views
  • 3 replies
  • 0 Likes

Custom URL Category with Wildcards

HelloI have a question. www.example.com _________|_________ | |www.example.com/sales-team www.example.com/marketing-teamMy customer want function belowThe sales team access "www.example.com" and "www.example.com/sales-tea...

request restart software - Clarification ?

Newb question, but I can't seem to find the answer I'm looking for so I'll just ask..The command 'request restart software' is *JUST* the management software itself, like logging, ssh, snmp, etc, but does *NOT* affect any time of forwarding happening through the box (dataplane), correct?There is the command 'request restart dataplane' which is o...

steveo by • L3 Networker
  • 8161 Views
  • 4 replies
  • 0 Likes

PA random packet captures

I've noticed that our 5020 is taking (what seems like)random packet captures. I searched this forum about this, and have read that the PA does do packet captures if the traffic is identified as "unknown-tcp" and "insufficient-data". The traffic I see that is generating pcaps seems random. For example, there are pcaps for "ciscovpn", "apple-pu...

jambulo by • L4 Transporter
  • 2981 Views
  • 3 replies
  • 0 Likes

SSL decryption - File blocking problem IE v8

I have a file blocking policy defined to block specific attachments via external web mail portals. I get correct matches for the application and also get successful SSL decryption. My problem is that Internet Explorer v8 clients can still send the attachments even though they show up as "deny" in the logging. The Mozilla Firefox or Google Chr...

  • 24430 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks