This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! CLI Arp table result

Hey, I wonder if the "Show arp all" command doenst show the IP - MAC pairs if they are not matching the IP range of the VLAN (which is defined by subinterface) ? Like on the ethernet1/2.50 (which range is 10.66.50.1/24) i wont see the 10.66.51.X IP?

Resolved! Failed to update content package

Good Evening, I'm having problem installa dynamic updates (PA3020 sw ver 9.1.18) Application and Threats. Everytime I tried to install manually or authomatically I receive this error in system log Failed to upgrade Content package to version <unknown version> Content package downloaded but installation could not be scheduled' Antivirus Upd...

unibg_it by • L1 Bithead
  • 6983 Views
  • 5 replies
  • 0 Likes

Error 503: Service Unavailable

Hello! I am configuring an ha cluster Fw 440.Firmware 10.1.3 When i push "commit" i lost gui access. I can ping andaccessvia ssh to fw. I recover the gui access via cli:request restart system. I have updatefirmware to 10.1.11-h5 but i happen the same or something worst! main fw never gotaccessvia gui Bakcup fw happen the same than before ...

Cannot Create Account on CSP

Hi, we've received our PA-445 but cannot create a Customer Support Portal account for it. After entering the serial number and sales order number I receive the following error: Unable to create user account, request matches multiple Support Accounts. Anyideas, please? Thanks, Nick

ewgnickp by • L0 Member
  • 1759 Views
  • 2 replies
  • 1 Likes

Right way of moving cable

Please find the exsisting set-up: Juniper switch---ospf--->Palo-Alto firewall------------tunnel-----> External 3rd party Cisco Router We are planning to change the Juniper switch to Cisco switch and make the configuration as below: Cisco switch---ospf--->Palo-Alto firewall------------tunnel-----> External 3rd party Cisco Router B...

Sujanya by • L3 Networker
  • 1979 Views
  • 2 replies
  • 1 Likes

PA410 Version: 10.2.7-h3 does not send logs to Panorama

Hi team, I got a question , after upgrading Panorama to 10.2.7-h3 the logs stopped to be reflected on. (PA-410 to Panorama) ( from PA-3250 to Panorma is working properly). So , I proceed doing the following : 1. We proceeded with the workaround provided by https://live.paloaltonetworks.com/t5/general-topics/pa410-version-10-2-7-h3-does-not-...

F.Pinar by • L3 Networker
  • 1650 Views
  • 1 replies
  • 0 Likes

Bug Search Tool

Hi all, I've created a tool, that you might find helpful. It can be tedious to search for specific bugs, or when a bug have been addressed. This tool gathers all known and addressed issues from all (not EoL) releases and makes it easier to filter through. Currently only supports PAN-OS. Bear in mind, that it's a work in progress. I would...

Threat name is Blank on Email report PDF attachment

Hi everyone, Good day and greetings! I have an unusual encounter with an email report pdf attachment. The threat names are blank but I can identify them by looking at the "Count" Like below snapshot. Were this ever a bug or was intended to be like this? Regards, Renz Caparas

renzanjo11_0-1710747378203.png

Matching HIP in Decryption Policy

Anyone doing this? It is configurable in the policy itself but isn't referenced in any documentation. The firewalls seem to ignore the HIP profile configured in the decryption rule when matching/not matching traffic. When I configure the rule to match a hip profile, it never matches correctly on the HIP part. The hip profile is set to match ess...

ccscott by • L2 Linker
  • 9092 Views
  • 12 replies
  • 0 Likes

Applications not being identified correctly

I am running into a number of situations where the applications are not being identified correctly and thus not working. I can see that the applications is using the correct port, but the PA shows it is "web browsing", unknown, etc. Examples:KaKaoTalk (ports 80 and 443) which is enabled, does not workGuild Wars (6112, 6600 and 80) 6112 shows ...

BobW by • L4 Transporter
  • 8713 Views
  • 4 replies
  • 0 Likes

Dual VPNs with Dual ISPs with a Single Firewall to a Remote Site

Dual isp with tunnels have been configured. primary isp is on eth0/1 and secondary is on eth0/5. Tunnel monitoring has been configured on primary tunnel. when primary isp goes down tunnel traffic will be shifted to secondary isp tunnel. Physically i have tested by removing primary isp at firewall, automatically all traffic get shifted to secon...

EDU-110/220 Still Available

I'm looking for the Self Paced version of the EDU-220 which used to be the EDU-110. Has this been removed. I don't have the time currently to go to an Instructor lead course and studying for my PCNSE. Thanks

Resolved! Limit download speed

Hai all, we have different qos class and allocated bandwidth, all of them are working . Now qos 2 has a guaranteed of 20mbps and max of 50 mbps . and only 10 user is assigned to it if a user start a download of 25G file and if all other band width are free he will get max of 50 mbps i understood this much. and if another user want to download at...

Rule works at one site but not another

Hi All, I have a rule to block TikTok at a school and it works as expected. I have another rule to block TikTok at another school and it does not work at all. The rules are identical except that the first rule blocks some other apps as well. I've attached screenshots. Rule1 and Log1 are for the site that works, Rule 2 and Log 2 are for th...

  • 24415 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks