This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

debug dataplane packet-diag causes PA5050 to stop working? PAN-OS 4.1.7

Hi,today i tried to debug a packet flow via the "debug dataplane packet-diag" command.I did that by using this guide.Unfortunately this causes our PA5050 Active/Passive Cluster to complete stop working for a few minutes. :smileyangry:Is this a known bug in PAN-OS 4.1.7?I used a packet filter so cpu can't/should not be an issue.Here my debug sett...

Issues again with Brightcloud Services

On the 12th of November 2012, I am having issues again with Brightcloud not resolving websites from the cloud dB. This has happened in the month of October 2012 as well. The Brightcloud services cannot receive data as well. All connections look absoutely fine and this just started happening out of the blue.This is also happening across all my...

Multiple Captive Portal Settings

I know on top of my head that multiple captive portal profiles are not possible. But was just wondering if there is or I might have missed something on how we can acheive this.I want to set a captive portal for Group A to have 60mins of session and Group B to have 30mins of uniterrupted browsing session. Once members of Group B have reached 30...

Resolved! Policy migration question...

I am migrating from a port-based firewall to the PA and I want to put the application for all policies that cover inbound services instead of the ports. I plan on temporarily doing a V-wire on the internet connection before the cutover to gather the app-ids needed for each policy so here is my question: Is there a report which will tell me the...

Rjschultz by • Not applicable
  • 3647 Views
  • 4 replies
  • 0 Likes

Resolved! Cisco Telepresence test failing due to SDP being rewritten

We ran http://test.callway.com on our network to test Cisco WebEx Telepresence and it fails due to the following:IssueYour firewall is altering SIP messages and interfering with the proper operation of WebEx Telepresence.What does this mean?Your calls may drop or not complete successfully, and you may not be able to use extended features.What ca...

sconley by • Not applicable
  • 3502 Views
  • 2 replies
  • 0 Likes

Resolved! Passive Mode in IPSec

Hello~ Guys~I'd like to know Passive Mode in IPsec. Anybody Help ME~~~Thanks in advance.Have a nice day~~~

blocking google apps via URL

Our users are getting on a regualar base phishing mails in which they are asked to fill in their username and password by clicking on a link.We don't have the URL categorizing license but are using URL filtering via custom URL filtering and that works fine (most of the time). We put the links of the phishing mails in the custom URL category with...

holemans by • L1 Bithead
  • 3364 Views
  • 2 replies
  • 0 Likes

Resolved! Cisco VCS random disconnects

Hi We have a Cisco VCS-C on the inside network and a rule created on our PA to allow all traffic to the VCS-E which sits on the public facing network. I'm finding my calls to H323 or IP addresses are randomly disconnecting after a period of 50 minutes.I've checked with Cisco and they've said to check my FirewallHas anyone any experience with PA'...

djrodb by • L3 Networker
  • 5992 Views
  • 2 replies
  • 0 Likes

Resolved! Help: SSL decrypt vs yahoo & google driver

Hi all!I config PA to decrypt SSL traffic.I test traffic Https on gmail, facebook, it okBut my yahoo and google driver client can not connect to servers.This is my config.Pls help methanks

dat.tran by • L2 Linker
  • 5149 Views
  • 1 replies
  • 0 Likes

Is PAN OS buggy?

If I only had my personal experience and the amount of chatter on the support forum, I'd say that the PAN OS is buggy. Is there more comprehensive information available on bugs in the various releases, like Cisco's Bug Toolkit? I'd like to make more informed decisions on when to take the plunge into the next release.Thanks,Mike

msullivan by • L3 Networker
  • 9329 Views
  • 11 replies
  • 0 Likes

User-ID-Agent Traffic

We have user-id-agents on ou core DC's and all our local DC's (across the WAN). We receive reports with high SMB traffic polling from the core DC -> local DC. Anyway to eliminate or reduce?

rrau by • L3 Networker
  • 5038 Views
  • 6 replies
  • 0 Likes

Resolved! Update application v 339

Hello,Since I have updated my active/passive cluster with latest Application and threat content (version 339, released yesterday), some ssl traffic is now recognized as "tor" application.This traffic is only ssl, not tor.Is someone else have this problem ??I have 2 PA-4020 version 4.1.9.I open a case for this with my network integrator.I returne...

  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks