This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Help support

Dear Palo alto family, I face some difficulty to ping internet on DMZ , i am trying to configure a security policy DMZ_to_Public/ WAN but still i didn't ping 8.8.8.8 in DMZ switch and didn't ping in firewalls itself also. Help me to solve this issue pls

Zola12 by • L1 Bithead
  • 1882 Views
  • 3 replies
  • 0 Likes

GlobalProtect Split DNS configuration

I'm looking to configure split tunneling and DNS in the following way: If the DNS request is from a defined list, send the query to the tunnel DNS servers, if not, send through local adapter DNS. If the resulting reply contains an IP in the defined route, send it through the tunnel, otherwise out the local adapter. Every configuration I have...

JoeLane by • L0 Member
  • 3302 Views
  • 2 replies
  • 0 Likes

Resolved! eventid eq tunnel-status-up/down

Hi Team, We run the command eventid eq tunnel-status-up / down but we dont see any output under Monitor>system. What is the reason? two days back we see the went down and see the DPD log as well but still no result for subjected command please suggest.

shirishkulkarni_0-1714376236358.png
shirishkulkarni_1-1714376355230.png

How to make white list policy on file blocking palo alto

I have Palo Alto PA - 5520 Series when the user uploads a file, I want palo alto just allow file in jpeg, png, xls, xlsx, pdf type. and blocking other file types. because my server has an incident, it receive file type phar and php (malicious file) but palo alto didn't block this file because Palo Alto alto didn't have phar file type. so I wa...

Deactivate BFD option

Hello, I need to disable the BFD option, can anyone tell me the best steps to follow? I also need to know the implications that may occur when I disable the BFD option. thanks

Alpalo by • L4 Transporter
  • 4030 Views
  • 5 replies
  • 0 Likes

Group Based network policy not being blocked.

Hello, I have an openldap server setup as well as an LDAP policy and group mapping on the Palo Alto firewall. When I run the 'show user group name "cn=employees,ou=groups,dc=brillnet,dc=com". I can see the users in the group just fine. Refer to the output below. I am using the UserID xml api to associate group/user to ip mappings. Calls...

edlyle_0-1714159919760.png
edlyle_3-1714159961648.png
edlyle_4-1714159989788.png
edlyle by • L0 Member
  • 2119 Views
  • 2 replies
  • 0 Likes

Resolved! User Type requirement for PCNSE exam

Hello,I was wondering if anyone can help regarding the User Type required before scheduling PCNSE exam with Pearson VUE. The options are 1) Customer, 2) Partner, 3) Academy and 4 Palo Employee and I really have no idea what I am supposed to pick. My Palo account is linked to my gmail email address, as I have no intention "locking" my certificate...

Unable to add virtual disk to Panorama

Hello, We are running Panorama VM release 8.1.8 un Panorama mode.We have a 2 TB disk for logging and we would like to add a second 2 TB disk.The new virtual disk has been added to the VM, and after reboot is seen as sdb in Panorama (sdc is already working) : > show system disk detailsName : sdbState : PresentSize : 1887436 MBStatus : Mig...

Setting up portchannel from router to a pair of PA

Hi Guys, I have a pair of PA5220s and a Cisco router ASR1001. I want to set up a port channel on the router and then spread the interfaces between 2 PAs. Each interface on the PA is set for virtual wire. I have done port channels between Cisco routers and Nexus switches (vPC) many times, but I am not sure if the PA firewalls support this setup...

tinhnho by • L3 Networker
  • 2512 Views
  • 3 replies
  • 0 Likes

Unable to ping website, getting this site can't be reached

Hello, I'm a novice so I could use any help, RTFM, just point me in the right direction. I currently having an issue getting to a vendor site, can't ping the website or view the page. But from outside of our organization, it page comes up just fine and pings. when I perform a dns lookup, I can see dns entries and when I ping it, I'm getting an...

Fast boot PA-450

I have a firewall that for some reason after doing a version update to 11.1 is only taking 2 to 3 min to boot now. I noticed all the logs were not showing up and the interfaces was showing down, but everything was working. I decided to do a factory reset and only do the update to 11.0.2-h2. The reboot time went to 5 min and now the I can not cha...

dwythe by • L0 Member
  • 1921 Views
  • 2 replies
  • 0 Likes
  • 24430 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks