This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

PBF with Egress loopback interface

I may be going about this wrong, but here's what I'm trying to accomplish, and this is the way I thought I could accomplish it. I need to route all traffic from a specific zone/subnet to a routing instance, and load balance egress, with the exception of RFC1918 destinations. My thought was to create a PBF rule to forward traffic to a loopback i...

Screen Shot 2022-03-16 at 11.38.38 AM.png

CVE-2024-3400 IOC's

Hello All, Its a twitter link but will try and summarize the process. https://twitter.com/cyb3rops/status/1781294529586331650 Credit to: Florian Roth @cyb3rops We decided to share our #YARA rules to scan for indicators of the exploitation of CVE-2024-3400 in #PaloAlto's PAN-OS with the community and included some of the generic rules ...

Resolved! Help understanding Asymmetric Path issue

Hoping that someone can help me to understand my asymmetric path issue (out of sync). I have a single virtual firewall with 2 virtual routers. Interfaces: Client (in zone 'client'). Is gateway for subnet. VPN (in zone 'vpn'). Is gateway for subnet. Machines: Client-01 - (192.168.1.3) 1 interface in 'client' zone. VPN-01 - 2 interfaces, (19...

Screenshot from 2024-04-21 09-14-11.png
shyrus by • L0 Member
  • 10057 Views
  • 3 replies
  • 0 Likes

Resolved! Can't import a certificate via XML API using C#

Hello, I'm trying to import a certificate to a Palo Alto VM-50 via XML API with an App written in C# but I always get this error: <response status = 'error' code = '400'><result><msg>No file uploaded</msg></result></response> My C# code is below, I can't see where the problem is, if I use this curl com...

kittcat by • L0 Member
  • 2034 Views
  • 1 replies
  • 0 Likes

Unresponsive support @clico

Hello, We've got an issue with a PA3250 and the thing is that support went silent on us. They were supposed to provide us with an answer before 14.12.2022 and we haven't heard from them. Calling them doesn't work, as they don't pick up their phones. What's going on? How can we address this?

silviub by • L0 Member
  • 2858 Views
  • 3 replies
  • 0 Likes

Resolved! Monitoring Global Protect

I'm currently in the process of migrating my company from AnyConnect to Global Protect on our 5220s. I'm looking for your feedback on how you all "monitor" the VPN service? When comparing the "dashboard" view of Cisco's ASDM I don't really see anything which can be loaded on the Palo "dashboard" tab. It seems like the only real way is to look ...

Incomplete release notes

Hello, why do I have to go there: PAN-OS 10.2.7-h6 Addressed Issues (paloaltonetworks.com) to find some unresolved issues in 10.2.8 ? i.e PAN-242627 or PAN-246431

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature works! Why do accepted solutions matter? By marking a reply as an Accepted Solution, you cont...

JayGolf_0-1691518400714.jpeg
JayGolf by • Community Team Member
  • 11941 Views
  • 3 replies
  • 15 Likes

Basic Palo Alto configuration Help

I am very new to PA firewalls. To understand the firewalls I have setup a lab and also worked on the physical firewall. Following my topology PA - Switch - PA VLAN 100 Ip : 192.168.1.5/30 and 192.168.1.6/30 Zone WAN Mgmt profile : ping enable interface : L3 sub interface 1/1.100 - tag 100 Nothing else is configured. I am try...

gondolf by • L1 Bithead
  • 2738 Views
  • 2 replies
  • 0 Likes

Citrix Receiver on Globalprotect

I seem to have Globalprotect working fine for access to any internal resource.The one thing that does not seem to be working is the connection Citrix Receiver (PNAgent legacy version 13.3) makes to our internal Citrix Web Interface / Services site.I'm getting the error "citrix receiver could not contact the server. please check your network conn...

dieter_b by • L4 Transporter
  • 14645 Views
  • 5 replies
  • 1 Likes

Resolved! VM monitoring sources attributes/annotations

Does anyone know more on the use of the "annotation" field for use in a dynamic address group from a vm information source?Can the notes or tags field in the summary tab in vCenter be used to apply custom annotations? Any assistance on the syntax would be great since PAN dosn't seem to provide much on this that I could find.The goal is to be abl...

vc.jpg
dag.jpg

GlobalProtect and using split tunneling

Global protect has the handy feature of excluding select destinations from being sent over the vpn. For example, setting(Split Tunnel - Domain and Application - Exclude Client Application Process Name) https://docs.paloaltonetworks.com/globalprotect/4-1/globalprotect-app-new-features/new-features-released-in-gp-agent-4_1/split-tunnel-for-public-...

Resolved! USER ID MAX USERS IN A GROUP???

Hello,I've configured on PA5060 an Idenfication with AD:PA5060: 4.1.6 USER ID AGENT : 4.1.4-3LDAP SERVER 389 I do a group mapping by group but this group have more than 16000 users.when I do a show user usersIDS , I can't see all my users. I know that AD have a limitation of page size to 1000 users by request.do you know if they are an limit...

alle by • L3 Networker
  • 20116 Views
  • 10 replies
  • 0 Likes
  • 24446 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks