General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 2835 Views
  • 2 replies
  • 13 Likes

How to "fix" vulnerabilities.

Hi,

I have a lot of vulnerabilities that keeps triggering in my firewall, but I'm not sure whats causing it or how to fix it. 

Most "attacks" are done by servers or clients on my own network...

- Microsoft Windows SMB Fragmentation RPC Request Attempt

...

johnd by L2 Linker
  • 2313 Views
  • 2 replies
  • 0 Likes

Resolved! SSL for GlobalProtect / Captive Portal

Hi All,

I'm attempting to install a wildcard certificate on the firewall for Global Protect and Captive Portal without much luck.

Basically I'm trying to use the existing wildcard certificate, the organization has. Steps I've taken:

1) Export the certif

...

BTS_MS by L2 Linker
  • 3362 Views
  • 2 replies
  • 0 Likes

VoIP over NAT issues: Ring but no audio; disconnects

I have our VoIP PBX set up with an IP on our external side via NAT. The policy is a simple static NAT from the internal IP to the external. I also have the correct security policies in place to allow SIP/RTP traffic to pass freely to and from the ext

...

Resolved! PA-2000 HA Timers

Currently if I hard power down my primary firewall it takes about 6 Seconds for the secondary to take over, a bit slow really.

Changed most of the HA timers to their minimum, just checking to see if there is any other configuration that can be changed

...

http forward to proxy

Hi,

I try to forward my WiFi mobile users http communications to my proxy.

WiFi mobile users and proxy are in two different VLAN plug on Palo Alto (default gateway of mobile users and proxy is Palo Alto Firewall).

Is it possible with Palo Alto?

The probl

...

mlop by Not applicable
  • 7434 Views
  • 13 replies
  • 0 Likes

Resolved! Using ISA for OWA

Hi All

I'm looking to replace our Fortigate 110c with a new PA-500 and I've managed to write the security and NAT policies which when tested seemed to work well apart from OWA.

We have an ISA 2006 server which publishes OWA and OMA on a public IP and h

...

TDC by L1 Bithead
  • 2325 Views
  • 3 replies
  • 0 Likes

Resolved! Session timeout

Hi All,

i want to ask about session timeout setting in palo alto.

if we create policy to allow traffic from trust to untrust with service http (custom http port 80)

1. what is default session timeout for http traffic?

from my testing it will hit web-brow

...

el by Not applicable
  • 3428 Views
  • 2 replies
  • 0 Likes

Palo Alto in Cisco network with VRF lite

BRosenba asked this question last year.  "We've recently purchased an HA pair of PA 5050s. We are planning to utilize the devices in cooperation with some Cisco core switching hardware and VRF lite to segment/secure internal traffic as well as traffi

...

oshcomp by Not applicable
  • 4318 Views
  • 1 replies
  • 1 Likes

Resolved! Control OWA

Hi

I want to stop our users from accessing company email from their home (non company supplied) PCs using OWA. I still want to allow access to our email systems through webmail/https

Can this be achieved by app filters (MAPI, Active sync) OR do I need

...

djrodb by L3 Networker
  • 3588 Views
  • 4 replies
  • 0 Likes

New Pan Agent.

We recently installed the new  PAN agent  4.1.4.3.

Since we installed this we don't seem to be able to get at our LDAP group against which we have many security rules.

i have been told that an option exist with userid agent option in the Device tab to

...

Resolved! CERT_DATE ERROR SSL-VPN Global Protect PanOS 4.1

Hello,

I configured the VPN-SSL on PANOS 4.1 using the "Configure Global Protect tech notes" document and the migration from Netconnect to Global Protect. Following these manuals I got this error.

(T5448) 01/19/12 12:21:10:825 Debug( 392): CPanHTTPSess

...

Resolved! Seperate policy for IPSec VPN and SSL VPN?

So I would like to have different policies based upon what device a user comes in from. If they use Globalprotect with HIP checking, they are given a less restrictive policy. Where as if they come from an iphone with ipsec, they are given a more rest

...

Global Protect Client in a Macintosh Environment

This is more of a Information feed as we have been doing some testing using the Global Protect Client on Apple Mac's

GP 1.1.5  Bug found with AD username having a space caused an error a separate discussion on this can be found.

GP 1.1.6 Works fine on

...

  • 24005 Posts
  • 99 Subscriptions
Top Solution Authors
Top Liked Authors