This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

GlobalProtect windows negating/disabling RSA Authentication

We use RSA's MFA Agent for Windows authentication. When we install or update GlobalProtect, it disables the MFA Agent at Windows login until we connect at least once via the VPN. It appears it is adding itself as an authentication provider into the Windows Login UI and I suspect it is related to these registry entries below. Has anyone found ...

Zone to zone interaction PBF

Hi All, i have some doubts .... 1.i have three zone TRUST,DMZ,UNTRUST. 2.there is a nat policy from TRUST zone, DMZ zone to untrust 3.all interface is under same VR .and there i haven't add any static route yet. instead i create a PBF rule from both TRUST AND DMZ to UNTRUST (destination interface=untrust interface, next-hop untrust pc) 4.Secur...

VRF lite two different set

I want to use two Virtual Router VRF router-28 and VRF router-128 WRF-Router-28 for wan, inside DMz Second-Router-128 WAN, INSIDE and DMZ Separation port connection for two set of DMZ, WAN and inside this all allow for PA-440? I'm trying to use as two virtual firewall to one physcial it's don't speed throughout wan connect is very slwo

Resolved! CLI Arp table result

Hey, I wonder if the "Show arp all" command doenst show the IP - MAC pairs if they are not matching the IP range of the VLAN (which is defined by subinterface) ? Like on the ethernet1/2.50 (which range is 10.66.50.1/24) i wont see the 10.66.51.X IP?

Resolved! Failed to update content package

Good Evening, I'm having problem installa dynamic updates (PA3020 sw ver 9.1.18) Application and Threats. Everytime I tried to install manually or authomatically I receive this error in system log Failed to upgrade Content package to version <unknown version> Content package downloaded but installation could not be scheduled' Antivirus Upd...

unibg_it by • L1 Bithead
  • 6902 Views
  • 5 replies
  • 0 Likes

Error 503: Service Unavailable

Hello! I am configuring an ha cluster Fw 440.Firmware 10.1.3 When i push "commit" i lost gui access. I can ping andaccessvia ssh to fw. I recover the gui access via cli:request restart system. I have updatefirmware to 10.1.11-h5 but i happen the same or something worst! main fw never gotaccessvia gui Bakcup fw happen the same than before ...

Cannot Create Account on CSP

Hi, we've received our PA-445 but cannot create a Customer Support Portal account for it. After entering the serial number and sales order number I receive the following error: Unable to create user account, request matches multiple Support Accounts. Anyideas, please? Thanks, Nick

ewgnickp by • L0 Member
  • 1739 Views
  • 2 replies
  • 1 Likes

Right way of moving cable

Please find the exsisting set-up: Juniper switch---ospf--->Palo-Alto firewall------------tunnel-----> External 3rd party Cisco Router We are planning to change the Juniper switch to Cisco switch and make the configuration as below: Cisco switch---ospf--->Palo-Alto firewall------------tunnel-----> External 3rd party Cisco Router B...

Sujanya by • L3 Networker
  • 1957 Views
  • 2 replies
  • 1 Likes

PA410 Version: 10.2.7-h3 does not send logs to Panorama

Hi team, I got a question , after upgrading Panorama to 10.2.7-h3 the logs stopped to be reflected on. (PA-410 to Panorama) ( from PA-3250 to Panorma is working properly). So , I proceed doing the following : 1. We proceeded with the workaround provided by https://live.paloaltonetworks.com/t5/general-topics/pa410-version-10-2-7-h3-does-not-...

F.Pinar by • L3 Networker
  • 1629 Views
  • 1 replies
  • 0 Likes

Bug Search Tool

Hi all, I've created a tool, that you might find helpful. It can be tedious to search for specific bugs, or when a bug have been addressed. This tool gathers all known and addressed issues from all (not EoL) releases and makes it easier to filter through. Currently only supports PAN-OS. Bear in mind, that it's a work in progress. I would...

Threat name is Blank on Email report PDF attachment

Hi everyone, Good day and greetings! I have an unusual encounter with an email report pdf attachment. The threat names are blank but I can identify them by looking at the "Count" Like below snapshot. Were this ever a bug or was intended to be like this? Regards, Renz Caparas

renzanjo11_0-1710747378203.png

Matching HIP in Decryption Policy

Anyone doing this? It is configurable in the policy itself but isn't referenced in any documentation. The firewalls seem to ignore the HIP profile configured in the decryption rule when matching/not matching traffic. When I configure the rule to match a hip profile, it never matches correctly on the HIP part. The hip profile is set to match ess...

ccscott by • L2 Linker
  • 8902 Views
  • 12 replies
  • 0 Likes

Applications not being identified correctly

I am running into a number of situations where the applications are not being identified correctly and thus not working. I can see that the applications is using the correct port, but the PA shows it is "web browsing", unknown, etc. Examples:KaKaoTalk (ports 80 and 443) which is enabled, does not workGuild Wars (6112, 6600 and 80) 6112 shows ...

BobW by • L4 Transporter
  • 8611 Views
  • 4 replies
  • 0 Likes

Dual VPNs with Dual ISPs with a Single Firewall to a Remote Site

Dual isp with tunnels have been configured. primary isp is on eth0/1 and secondary is on eth0/5. Tunnel monitoring has been configured on primary tunnel. when primary isp goes down tunnel traffic will be shifted to secondary isp tunnel. Physically i have tested by removing primary isp at firewall, automatically all traffic get shifted to secon...

  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks