General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 777 Views
  • 0 replies
  • 0 Likes

Resolved! Testing IPv6 using test-ipv6.com

I'm unable to successfully complete test-ipv6.com (10 out of 10) without doing either 'Any' application or adding unknown-tcp as an application.

When I do just web-browsing, I get denies on 'unknown-tcp'.

Is there something different I can do without a

...

Isolate and NAT a segment for BYOD

I've tried setting up a subnet on our local network for wireless BYOD purposes and our aim is to have phones/pads connect only on this subnet (10.84.0.0/16). An ACL on our layer 3 core switch prevents this subnet from communicating with other 10.x.x.

...

sspivey by L1 Bithead
  • 2471 Views
  • 1 replies
  • 0 Likes

Resolved! ignore_user_list.txt/filter groups list

Question, when we were using the User Identification Agent Version 3.1.2 we could filter out accounts by editing the “ignore_user_list.txt” in the pan agents folder (typically c:\Program Files\Palo Alto Networks\PanAgent).  Now we have upgraded to th

...

Resolved! Another download is in progress

When attempting a download of a PAN OS software image, I get the error "Another download is in progress. Please try again later" in the download dialog.  How can I find out what download is in progress and potentially stop that so I can get the softw

...

Report like in CheckPoint - possible?

repo
Hi

Recently I was on Next Generation SECURITY Conference 2012 in Poland. I got sample report from CheckPoint 3D security. You can get it from http://downloads.checkpoint.com/dc/download.htm?ID=13521

Is it possible to get similar report from PAN (wi

...

_slv_ by L4 Transporter
  • 2990 Views
  • 3 replies
  • 0 Likes

Resolved! HA Down Time


Dear Support:

I want to know how long will the Standby PA become active ?

According to the HA best practice , Running @ PA2020 & 4.1.8

the HA statue  is normal , all things are match

and the link monitor had setup , interface monitor set to shutdown

I pin

...

j.guo by L1 Bithead
  • 4675 Views
  • 4 replies
  • 0 Likes

Resolved! Export Object Addresses list

I see there is a way to export policies, is there a similar way to export my objects/addresses?  I'm trying to do a little cleanup on my PA4020's and I'd like to send object lists to the people who requested their creation, to see if they are still v

...

bhelman by L2 Linker
  • 3752 Views
  • 3 replies
  • 0 Likes

Resolved! HA Lite Configuration A/P not working...

Hi All,

Trying to configure a pair of PA-200's as an active-passive cluster using "HA lite".  Right now both devices are showing active, so it seems the nodes do not see each other as cluster members.  I have defined one HA link on both firewalls, eth

...

Resolved! Deploying Dynamic Updates

We have a Panorama box, and I thought I would try to push apps and content version 192 out to our PA-2050s that are in an HA pair. We are running PAN OS 3.1.2 on the Panorama server and the PA-2050s. I downloaded the apps package, and began deploying

...

mharding by L4 Transporter
  • 8296 Views
  • 10 replies
  • 0 Likes

Resolved! HA issues since upgrade to 4.1.8

Hi.

I have two 2020's in a HA configuration.

On software 4.1.7, when I modified configurations etc, the synchronisation worked just fine - every change was automatically synched to the passive node on commit.

Now that I've upgraded to 4.1.8, more than h

...

darren_g by L4 Transporter
  • 3081 Views
  • 4 replies
  • 0 Likes

Resolved! Veeam Application-ID

This is probably a question more for Palo Alto networks, but I'm not sure where to submit this question, or request a new app-id.  I was wondering if an application profile for Veeam Backup and Recovery will ever be created?  I am not seeing anything

...

cmateam by L3 Networker
  • 3736 Views
  • 1 replies
  • 0 Likes

Manager Interface Protection

I would like to know a way to protect the manager interface because I´m undergoing brute force attack trying to access the “admin” account and I cannot use the permit address IP because I´m over a dynamic IP connection to manager the equipment.

Is th

...

rrunge by Not applicable
  • 2146 Views
  • 1 replies
  • 0 Likes

Source user not found

Hi there,

I have a random issue occur whereby one or two of my users seem to loose access to their internet privileges. I check on PA and it shows the traffic but no source user, which is what the rule for their internet access is based on. If we rebo

...

JRussell by L3 Networker
  • 3985 Views
  • 7 replies
  • 0 Likes
  • 23986 Posts
  • 115 Subscriptions
Top Solution Authors
Top Liked Authors
Labels