This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Which logs to check for firewall auto reboot?

Hello,I need to go through the logs to check why the active PAN 2020 rebooted itself. I only have access to the cli (I have to ssh via the now active FW).Which logs should I check?? Under mp-log there is a whole bunch of logs I am not sure which one to check for system failure related issues.The reboot time is suspiciously close to the applicati...

BTS_MS by • L2 Linker
  • 21607 Views
  • 3 replies
  • 1 Likes

BrightCloud to BlueCoat Category mapping?

Is there a more recent Blue Coat WebFilter to BrightCloud URL Category mapping? I found the document from Jan2011 that lists the categories and the recommended mappings at that time. However in the last 2 years both vendors have added and removed categories and changed the descriptions of some of their existing categories. A more recent mappi...

robertb by • L0 Member
  • 2596 Views
  • 1 replies
  • 0 Likes

Firmware 4.0.8 to 4.1.8

I am new to Palo Alto firewalls and I am hoping this a quick easy question for somebody who is more familiar with them. I would to like to upgrade my PA500 to latest firmware. It looks like the latest release is 4.1.8 (I am using 4.0.8). I have downloaded 4.1.8 to the firewall. Once I click install on 4.1.8, will that require a reboot of the fir...

PAN only takes the first category of an URL from Brightcloud

Here is an example:www.aetna.com is rated on the website of Brightcloud as "Business and Economy" and "Health and Medicine"."test url www.aetna.com" results in a "Business and Economy", which could cause some legal issues when traffic to "Health and Medicine" should not be performed due to privacy reasons.Are there any plans to change that in t...

Policy Based Forwarding only works when using specific IP

Thinking outloud here...I would like to record voice traffic for VPN connected customer service agents.Traffic comes in a VPN-HomeRouters tunnel from a 10. IP range.The PBF works when setting source Zone and IP, Next Hop and 1 destination IP.When i change the IP to a range then the forwarding gets skipped (i'm thinking because of the Virtual Rou...

Resolved! Captive portal behavior with Ipads/Iphones

I am using the CP quite successfully. However, I am running into some strange behavior with the Iphones and ipads.If I connect a (non AD Bound) computer to the wireless, it connects fine and I get prompted for the captive portal only when I try to get to the internet. Perfect behavior.When I attach on Ipad or Ipod to the wireless, as soon as i...

BobW by • L4 Transporter
  • 9238 Views
  • 4 replies
  • 1 Likes

Resolved! 46076 ARP issue and 5.0.1

Hey,Has this been fixed in PANOS 5.0.1 release? It has no reference in resolved issues in release notes to that release. However this KB article says it should be fixed in 5.0.1: Can anyone confirm that this has been fixed for 5050 and release 5.0.1?

Resolved! How to Ping Public IP on PA500 Interface from same PA Untrust Interface

Currently we have a Guest Wireless network setup behind our PA. We'd like to use this network as a test network as well, for certain projects we are working on, to act as if it was outside the network. I have done this in the past with other vendor firewalls but I have not been successful in making this happen on a Palo Alto.Right now, when I co...

ARP timeout

Hello,We have a customer who is facing issue described by this KB article :I wonder whether it is possible to change the default timeout value which is set to 1800 seconds ?It could be very helpfull in some situations, and most of the network devices allow to change this value.I searched the Admin guide and CLI guide as well as the KB but I didn...

ldormond by • L3 Networker
  • 4379 Views
  • 3 replies
  • 0 Likes

Radius access for MGT conflict radius for user access.

Dear,we use radius profiles for internal users towards a customer internal network policy server and so. The administration of the palo firewall is done via the MGT interface on a dedicted pvlan based administration network. We want to enable radius authentication for administrator purposes , but this seems to be impossible due to the fact that ...

gejack by • L1 Bithead
  • 3460 Views
  • 1 replies
  • 0 Likes

Can I use DNS Proxy to Host External DNS?

Hello,I'm going through my first ever configuration of a PAN-500, coming from the McAfee Secure Firewall (Sidewinder). Our current firewall authoritatively hosts our external DNS records pointing to our MX records, etc, and I wanted to know if it's possible for the DNS Proxy module on the PAN-500 to do the same thing.Thank you.

Resolved! Support SSL/TLS Ciphers supported??

Hello GroupI am looking for the official list of supported and unsupported SSH/SSL ciphers on the Palo Alto Networks solution.Maybe I am not necessarily looking in the right location.Thank you.

scantwell by • L4 Transporter
  • 4344 Views
  • 2 replies
  • 0 Likes

Resolved! Security Profile default actions

Once again I find myself searching for documentation, once again I am disappointed. There have been a couple posts over the years asking to see the magical "default actions" and the standard answer is "here's how, go look yourself"This is an unacceptable answer. Someone has the list - what's the secret? I'll bet it's even updated regularly.Come ...

dsinnott1 by • Not applicable
  • 6242 Views
  • 5 replies
  • 0 Likes
  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks