This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Inbound SSL Inspection with mis-matched certificates (or SSL handoff)

Hi,I'm kind of expecting a no to this question, but I noticed whilst setting up inbound SSL inspection for a client the other day that if the Cert on the Palo Alto and the cert on the SSL web server do not match then the firewall will refuse to decrypt the traffic and just pass it though as SSL using the server certificate.It would be great to b...

Dpeters1 by • L2 Linker
  • 8985 Views
  • 5 replies
  • 0 Likes

Resolved! Can anyone explain this vulnerability in more detail "Service Enum Through SMB ServiceEnum2"

I am trying to find more detail on what this vulnerability is and what could possibly be triggering it in a Windows Server environment. I am thinking that it might be a mis-configured service or application native to Windows Server but looking for a system expert to confirm or deny that theory.When I look it up in the Threat Vault all it says i...

u11712 by • Not applicable
  • 11214 Views
  • 1 replies
  • 0 Likes

User/Group based policy questions

Hi,I have a need to configured user/group based policy. I having difficulties with the same and have multiple questions. I hope someone will help me with the configuration.1. We push all our policies from Panorama. Can I configure user/group based policy on Panorama and push to all firewalls?2. I have pushed the LDAP config from Panorama to all ...

Resolved! PanOS 5.0 User-ID Redistribution

So a new feature within 5.0 is to allow a PA to act as a user-id redistribution point for other PA's. Has anyone gotten this to work? I tried testing this out, but I am not seeing how to configure. I setup our core PA's to act as a redistribution point using a collector name and shared key.I then tried configuring one of my remote PA's to connec...

Resolved! Settings for getting Hyper-V working in PAN

setupHello,I have been struggling with this all day, and I think I have it narrowed down, but can't seem to nail it down yet.I have a test Hyper-V 2012 server in the data center, and all my services are working properly, except being able to connect to the VM's via Virtual Machine Connection. It uses TCP Port 2179 and is basically RDP, just runn...

Resolved! Receive time of logs ("Traffic Log") in a custom report

Hello all,I've created a custom report for gettings logs (from Database "Traffic Log") and I need the exact receive time for the entries.Unfortunately, there is no such column to choose from. The only column that contains time information is "quarter hour" - but this is not precise enough. If you take a look at the traffic logs directly (no cust...

Resolved! L3 setup for DMZ link

I currently have the following setup. Two PA's in active-passive with an L3 interface configured with zone DMZ-Web connected into a single switch. That same switch is connected to a VM host that is also in an active-passive configuration. The problem here is that the switch is a single point of failure. If we put in a second switch, can I ag...

iguarino by • L0 Member
  • 3431 Views
  • 3 replies
  • 0 Likes

Resolved! ISP Support

Hi,Just want to know how many ISP does Palo Alto supports?Thanks in advance.Rex

ANY policy not matching host traffic

Hi,I am troubleshooting SMTP access issue and for the same I have configured ANY allow policy for the host (src). I however dont see the SMTP matched in the policy. The ANY policy is device specific and is configured at top. All policies after that are pushed via Panorama. We have a default catch-all policy at the bottom and the SMTP traffic mat...

Monitoring PA-2050 (CPU, memory, Traffic volume, State)

Hi,I have two firewall PA (active/passive cluster) and i would like to monitoring several parameters like:- CPU- Memory- Traffic volume of all physical interfaces and subinterfaces- State of the FWS, etc.Which is the best way to monitoring a FW Palo Alto???? What way are u using to monitoring??? Palo alto can be configured to send you an email w...

Block gmail web messenget

Hello to all, I am trying to block gmail web messenger in a VW setup, I already configured SSL decryption so I am able to block facebook chat and posting even in https, but I am unable to block gmail web chat, I already checked this article: But still doesn´t work, any help will be appreciated

asaldana by • Not applicable
  • 4617 Views
  • 4 replies
  • 0 Likes

Resolved! Where can i find a reference for gui log search syntax?

Im having trouble finding a reference for gui log search syntax. I know i can run a custom report but that not too intuative and id rather just have a reference of all the options available.for example, can I use IP ranges?eg: 192.168.1.0/24-192.168.55.0/24 ?thanks

choff123 by • L3 Networker
  • 2915 Views
  • 2 replies
  • 0 Likes

Resolved! URL inspection on non-web browsing applications

One of my customers asked me a question about URL inspection on non-web browsing applications. The question was, if he has a Security Policy that allows multiple applications (web and non-web) and he also has a URL Profile attached to that policy, will the firewall inspection all traffic that is allowed through that policy even though some of it...

jwolach by • L4 Transporter
  • 2330 Views
  • 1 replies
  • 0 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks