This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Where can i find a reference for gui log search syntax?

Im having trouble finding a reference for gui log search syntax. I know i can run a custom report but that not too intuative and id rather just have a reference of all the options available.for example, can I use IP ranges?eg: 192.168.1.0/24-192.168.55.0/24 ?thanks

choff123 by • L3 Networker
  • 2915 Views
  • 2 replies
  • 0 Likes

Resolved! URL inspection on non-web browsing applications

One of my customers asked me a question about URL inspection on non-web browsing applications. The question was, if he has a Security Policy that allows multiple applications (web and non-web) and he also has a URL Profile attached to that policy, will the firewall inspection all traffic that is allowed through that policy even though some of it...

jwolach by • L4 Transporter
  • 2328 Views
  • 1 replies
  • 0 Likes

Question Regarding Traffic Log DB Quota

On of our customer, BRI, they found a system alarm which said "traffic log database exceed alarm threshold". Here's the screenshot: Here's the log quota settings on their box: Here's their real disk usage: The question is, what will happen if the traffic log db exceed its threshold? I know from PAN support that if the traffic db exceed tha ...

anzhari_p by • Not applicable
  • 7573 Views
  • 6 replies
  • 0 Likes

Resolved! Global Protect Client 1.2.0

We are using a self-signed certificate on our PAN. The Global Protect clients before the latest version were fine with it. Now I am getting invalid certificate errors connecting with the latest client. What has changed with this new client?Thanks

Kindle e-reader with Captive Portal

Hi AllI was wondering if anyone has managed to get a Kindle e-reader (E Ink not Kindle Fire) to work with a PA Captive Portal.We have had a couple of users who have been able to connect to the WiFi however the logon page will never show on the browser.ThanksTom

DHCP not working for Apple mac (AirPort)?

I have an issue where some Mac-clients gets "private address" when they try to reconnect to wifi and PA-2020 is DHCP server. A "show dhcp server lease all" shows "offered" for the client, but the client is not receiving the lease.I'm running 4.1.10Any ideas?

ARP Proxy

hello,i'm searching for information about the arp proxy functionality.We are using the 2020 series and i would like to read something about it.Is there anything?Thank you!Regards - axel

axel5le by • Not applicable
  • 5336 Views
  • 1 replies
  • 0 Likes

GlobalProtect user mapping not working

Hello.We're having problems with user mapping for GlobalProtect users.In this case there are 2 users connected to PA device, yet mapping isn't working for either of them: (IPs and names deleted from output)astec@fw1(active)> show global-protect-gateway current-userGlobalProtect Gateway: vpn.xyz.si (2 users)Tunnel Name : vpn.xyz.si-N ...

santonic by • L6 Presenter
  • 3803 Views
  • 1 replies
  • 0 Likes

Resolved! User ID agent issues, one user logs off, another user "logs in" a gets the previous users ip address", times out eventually

3 questions:Why does the Agent (and PAN) not get updated when a new user logs in?What is the purpose of the “Enable user Identification Timeout” and the corresponding “User Identification Timeout (min.)” in the Agent? What will be the result if we disable this setting altogether? We do not use NetBIOS or WMI probing at this time.User Identificat...

tstores by • Not applicable
  • 5162 Views
  • 2 replies
  • 0 Likes

Resolved! Web Server .js files not loading to outside clients

Our WebMaster is working on implementing some .js files on our WebServer. He has a few specific .js files loaded onto our Web Servers.They load up with no problems internally (Our PA allows ALL traffic from internal to our DMZ, Internal and External traffic both flow through an A10 Load Balancer to our two physical servers).From the OUTSIDE, the...

Resolved! How to change pan-agent priority?

sw-version: 3.1.12Given the command below, how do I force server01 to be the primary pan-agent without any disruption?> show user pan-agent statisticsTimer: interval of group membership retrievalState: *:primary pan-agent to retrieve group membership---------------- --------------- ----- ------- ------------------ ------ ------ -------- -----...

etnerual by • L1 Bithead
  • 3057 Views
  • 1 replies
  • 0 Likes

Resolved! Remote site internet

Hello- Just recently migrated from an old Checkpoint to a PA-500. PA is setup in a Layer 3 configuration. So far so good with the exception of one thing. My remote location isn't able to get internet access. This remote location gets internet from my head end location as they do not have their own internet circuit. Everything for internal access...

Resolved! Vulnerability false positive uptick? 32128

All of a sudden we've started tripping 32128 Pidgin MSN Integer Overflow Vulnerability. It started yesterday morning. Most of the traffic is coming from live.com to large assortment of our internal users.I'm guessing that this is a change on Microsoft's part. Any ideas?Message was edited by: Rand Hall I added a couple of packet captures.

MCmgt by • L2 Linker
  • 11548 Views
  • 8 replies
  • 0 Likes

Wildfire subscription logs

I am setting up my lab PA-200 for Wildfire. I had a question about the monitoring logs. I understand that using the Wildfire portal, you have to configure the global settings of what meta information to send to the Wildfire servers to see that info. (URL, src-dst IP, username, etc)If you have the subscription is this information still sent? ...

ftboomer1 by • Not applicable
  • 3426 Views
  • 3 replies
  • 0 Likes

Where is PAN User Identification Agent data stored?

Hello,We currently utilize the User Identification Agent to send usernames to the PA's. However, recently, the app has been locking up. It continues to run and send information messages in the log but it does not collect usernames. I cannot monitor the service because it is still running, just not communicating. I'd like to write a script to...

  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks