General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Issues installing the Terminal Server Agent on Server 08R2

I have this same issue at two separate clients. I installed the agent under elevated priveledges but once it is installed an I open it, I cannot click on any of the menu options. If I click on Restart Server, it says "query service fails with error5"

...

SDorsey by L4 Transporter
  • 3053 Views
  • 4 replies
  • 0 Likes

Ethernet link speeds

I am curious what the recommended link speed settings for the various ports. The external port has to be hard speedcoded to 100/full as that is required by the ISP.  The internal connection is to a gig core switch at auto detect (1000/full).

Should th

...

BobW by L4 Transporter
  • 4535 Views
  • 5 replies
  • 0 Likes

Site to site VPN terminating in DMZ possible?

Is it possible to setup a site to site VPN and have it terminate on the DMZ interface rather than the WAN interface? We have numerous remote locations that are running small sonicwall firewalls and connecting back to our corporate site. They currentl

...

High Availability across a Fibre connection

We are preparing to configure High Availability in Active Active mode on our PA-2020 firewalls in London.  Our first firewall sits in our main site in central London with our DR site sitting outside central London connected together via a 1Gbp Fibre.

...

BBHLTD by Not applicable
  • 2911 Views
  • 2 replies
  • 0 Likes

Resolved! Outbound NAT pool question

For reasons I will not go into here, I want to take outbound traffic from secure to unsecure and convert it from a many to 1 NAT rule to a many to many NAT rule.   I have 1024 public IP addresses.  I want to take a section of my network and provide a

...

EdwinD by L3 Networker
  • 2179 Views
  • 2 replies
  • 0 Likes

Resolved! "Stupid" Custom URL Filtering Question

If I want to block all derivations of "acme.com" in URL filtering how should I format the domain in my blocklist/custom blocking category?

If I add "acme.com" then that doesn't appear to match "www.acme.com", but if I add "*.acme.com" then it doesn't

...

apackard by L4 Transporter
  • 2986 Views
  • 5 replies
  • 0 Likes

Resolved! GlobalProtect 1.1.7 Subject Alternative Name (SAN)


I'm reading the changes to default behavior with certicifcates in the new GlobalProtect 1.1.7 and I don't know what the Subject Alternative Name (SAN) point is referring to. I generate all the certicates from the PAN firewall for the GlobaProtect aut

...

frypan by L0 Member
  • 2392 Views
  • 1 replies
  • 0 Likes

url field in cutom log format ?

Hi all,

I'm trying to customize the log forward to my Syslog.

In syslog server profile / custom log format / threat, I definitely not succeed in finding the right field where visited website urls are stored !

If somebody have an idea ?

Regards,

Karl

Karl by L1 Bithead
  • 3512 Views
  • 6 replies
  • 0 Likes

Resolved! GlobalProtect, enabling ipsec from outside

Hi all,

I am trying to enable Global Protect. So far I've been able to connect the client to the firewall successfully. However the remote VPN client cannot talk to inside hosts. But the inside hosts can ping the remote client.

After troubleshooting, I

...

BTS_MS by L2 Linker
  • 3711 Views
  • 4 replies
  • 0 Likes

Resolved! Harddisk Diagnostic Run test

Hi All,

Have you guys any experience to do harddisk diagnostic test on PA5020? if yes, how long i should wait? because i run the box almost 4 hours but till now no response from the box. there is no progress indicator so i dont know whether it still r

...

el by Not applicable
  • 5833 Views
  • 5 replies
  • 0 Likes

False Positive Virus

We use Total Defense for an antivirus program.  It appears that one of the executable (both the 32 bit and 64 bit versions) in the latest update is being flagged as a virus, Virus/Win32.WGeneric.bnrd, the other executable files are fine.  When I look

...

rgreens by L2 Linker
  • 3178 Views
  • 3 replies
  • 0 Likes

Resolved! Problem with Captive Portal authenticated by User AD

Hi all,

I got a problem when I use captive portal authenticated by user AD

- First, I install Palo Alto User Agent on AD machine, this job worked fine. On the traffic log of PA, I saw User AD.

- After that, I configure captive portal on PA and it works

...

nguyenma by Not applicable
  • 4043 Views
  • 4 replies
  • 0 Likes

Resolved! Multiple DMZ setup question

Hello,

I'm looking to create 2 dmz's on the PAN as separate networks.  This is how I have it envisioned and would appreciate any feedback.

1. configure two layer 3 interafaces with GW IP assigned
2. assign security zone to each interface
3. attach each i

...

iguarino by L0 Member
  • 3742 Views
  • 3 replies
  • 0 Likes
  • 23709 Posts
  • 103 Subscriptions
Top Solution Authors
Top Liked Authors
Labels