This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

No logs in the monitor > traffic tab?

Hello All,1.) I have just installed Palo Alto 7.1 in Eve-NG, and made two interfaces as Vwire with zone Trust and Untrust.2.) I am able to access access everthing (e.g. internet, ping, etc.) hence policies are working fine as I have created a policy to allow everything from Trust to Untrust. However I am not able to see any Traffic logs in the...

no logs.png

Update Panorama

Did not found any email to write Palo alto PAN-OS developers that hence writing here on feedback on palo alto Panorama update. After finishing update panorama then against the version we update it gives option of "Re-Install" by clicking on that it starts reinstalling and subsequently firewall reboots. Suggestion and request - please put con...

Resolved! Port forwarding through ipsec tunnel

Hello, I have two Pa-440's. One 440 has a public static ip and the other is just dhcp as of right now. I do a site to site to site vpn working between them. I setup an original port forward on the public static ip device to a local host and it worked great. Now, I moved that host to a subnet on the public dhcp firewall. I tried s...

IPSec IKEv2 multiple events per second

Hello everyone, I see many events per second for a site-to-site IPSec tunnel and am unsure if it's normal. The below events have a severity level of informational but go over and over in a second. My question is, is it normal? if not, where should I look to fix it? What can be wrong? ikev2-nego-child-startikev2-nego-ike-startipsec-key-delete...

BGP Advertising prefix to same AS it was learned from.

I'm working on a VRF-centric DC model that utilizes a PA as the firewall platform between VRFs. One of the snags I'm hitting is that if a route is learned from R1 on an AS (say 65001), and is advertised via eBGP to the PA (AS 65002), the PA won't even attempt to advertise it to R2 (Really R1, in VRF AF - AS 65001). I can work around this by spoo...

Tyler_C by • L1 Bithead
  • 24334 Views
  • 15 replies
  • 0 Likes

Unnown-TCP application "commvault"

Hi Guys, I hope you guys can help with classifying unknown traffic. I have read many forums for this topic none of which answer my specific question. I understand that should create a custom app if your application bespoke and it is unlikely that an APP-ID would be created. However, I am expereincing an issue with an application called "commv...

Resolved! How to use Seprate IPs on WAN interface of 2 Paloalto Firewall.

Im new in PaloAlto and configuring HA Active/Passive Mode with seprate IPs on WAN Interface in both Firewall, every thing is working fine but when Active Firewall 1 Syncronized with Firewall 2 its change the Firewall 2 WAN IP with Firewall 1 WAN IPs in that case my all routing to oustside is Block in Firewall 2 because it has different route out...

aamirns_0-1653313000551.png
aamirns by • L1 Bithead
  • 7583 Views
  • 8 replies
  • 0 Likes

Deny any any ruleset

So if you accidentally put the any any and deny ruleset at the top of the panorama firewall and it wont let you in through the web interface. How would we be able to get into the panorama to change it back to the previous configurations??

User id integration cisco ISE

hi i did User id integration cisco ISE using syslog field identifier as article http://k12itdir.blogspot.com/2016/02/paloalto-user-id-from-cisco-ise-nodes.html?m=1 and its working fine . Problem its just send user name without domain and since i have another integration with Active Directory i got domain\username . My request how to have user fr...

mhmameen by • L1 Bithead
  • 3069 Views
  • 2 replies
  • 1 Likes

Resolved! Using the REST API to create a bunch of Address Objects

I have to create a large number Address Objects and would like to use teh REST API to do so. I've seen a number of examples at adding various things, but I'm running into an issue with these specific shared objects. The all live in a device group called Global. If I do a GET, I see that an object will look as follows {"@name":"net-vl730-boise"...

DaveFitz by • L0 Member
  • 6149 Views
  • 1 replies
  • 0 Likes

TUNNEL STATUS RED AWS PAN TO ONPREM PAN

Hi Guys, Need your help, as I cannot figured out what's wrong with my configuration. Both side of my Phase 1 are working fine but when it comes to Phase 2 connection is not complete. Any idea how to fix this issue? Here is my AWS PAN configuration. Please note that my local IP is a private IP address which is I think due to being a VM PAN b...

MCipriano_0-1714708155306.png
MCipriano_1-1714708264907.png
MCipriano_2-1714708425551.png

Resolved! What does the configd process do for PAN-OS?

I'm documenting new services in PAN-OS present in 10.x. What does the configd process do? It appears to bind to udp/28879 (if only accessible "internally"). I do not see this service described in the Commonly Used Processes/Daemons url found here: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLUeCAO

jasonroy by • L3 Networker
  • 6072 Views
  • 3 replies
  • 1 Likes

Cyserver stopped by ntdll.

Hi team, Recently, We discovered endpoints that got disconnected from the console and there is no clue on trapsd why it happened because the agent didn't record logs since its last_seenn on the console, for example; the agent has a last_seen on 1 May 2024 and you reconnected the agent on 4 May 2024, there are no logs between 1 May and 4 May. ...

MarcoMJ by • L1 Bithead
  • 3097 Views
  • 1 replies
  • 1 Likes

Email laerts for just zone protection alerts

Hello all, I have applied a zone protection profile to the outside zone on my firewall. I am wondering how I can configure the firewall to receive email notifications just for alerts for this zone protection profile. Like every time an IP address is blocked by the firewall. Thank you

  • 24483 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks