General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

top bandwidth usage

is there a way to fined the top bandwidth usage in PA 4.1.x in the exact moment that i need , because usually i have to wait for 15 minutes to get it from the ACC.bandwidth

Question regarding unknown application behaviour

Lets say you configure a rule with:Application = AnyService = Custom Service (TCP port 12345)Now when the AppID engine cannot match anything I guess it classifies the traffic as "unknown-tcp".Will the traffic be allowed (because unknown-tcp is part of Any and the firewall will practically act as statefull firewall) or will it be denied?What is t...

Anon1 by L4 Transporter
  • 4955 Views
  • 5 replies
  • 0 Likes

Resolved! MDT and GP client

What's everyone using to deploy GP client? We're finding that because the GP client is not populated with any information(when downloading it from our PA firewall) it's causing problems with the MDT process. The MDT process stops as the GP client pops up expecting you to put the GW IP.Any help or guidance would be appreciated ThanksRodglo

djrodb by L3 Networker
  • 3171 Views
  • 1 replies
  • 0 Likes

Resolved! How to Fix - Error in getting locked users?

I have users locked out and yet when I go to Device > Authentication Profile is how this error in the Locked Users column "Error in getting locked users". What is cause and how do I fix it?This has now come up fairly often.System PA-2020 with 4.0.4 code.

Assigning VPN User a Static IP

We have a customer who is running a specific thick application that requires the user to have the same IP address every time they attempt to authenticate to their servers. In the office this is not an issue since we can assign them a static IP and then do NAT based on that IP address. However, they need these users be able to VPN in and use the ...

jmahoney by L1 Bithead
  • 4431 Views
  • 2 replies
  • 0 Likes

How to block upload dropbox with upstream proxy

Hi to all,I have to implement a block dropbox upload.The architecture that I have to provide the user network, the internal firewall Palo Alto, an external proxy, an external firewall, Internet.I configured the various points to implement the block and everything works if the client directly without going through the proxy, on the contrary inste...

SOCMAECI by L0 Member
  • 2329 Views
  • 1 replies
  • 0 Likes

PanOS 4.1 - GlobalProtect portal client configuration failed

I am having a problem with my GlobalConnect configuration. Everything works fine when I have it set to On Demand. However, I have a set of users I want to effectively have the VPN always on, so for them I've created a second configuration but when a user in this group connects I get the following error in my System Log:GlobalProtect portal cli...

kkolk by L0 Member
  • 4706 Views
  • 3 replies
  • 1 Likes

Resolved! Allow domain services through PAN 2050

I am trying to allow windows active directory services (2008 domain) through the firewall, in between zones. I have created my policy to allow the following applications:active-directoryms-ds-smbmsrpcnetbios-ssdnsms-win-dnsms-winsnetbios-dgms-netlogonI have created rules for bi-directional access. I am unable to join a server to the domain howe...

UncleRico by Not applicable
  • 4772 Views
  • 2 replies
  • 0 Likes

L3 vlans and devices/systems that don't support vlanning issue.

Hello all,I've recently setup our PAN-2020's with L3 sub-interfaces presenting VLANS to our core switches (per this discussion: ). However, I've run into a problem that I can't manage or connect to devices, like our SAN, KVM, and even the PAN Firewall (management port) because they are on the same switch and use the default vlan of the switch. ...

cmateam by L3 Networker
  • 3902 Views
  • 2 replies
  • 0 Likes

Resolved! VPN for IPAD

Does somebody how to configure an IPAD in order I can use the VPN. I have it working for windows laptops, but not for an Ipad, I look the manual but honestly I need somebody else to explain step by step. Can someone help me?Regards,

Resolved! LDAP not working

I am trying to get my PA to talk to an LDAP server. I set up the LDAP server as described in the documentation User Identification Tech Note - PANOS 4.1.pdf) but it never is able to connect. I get this error:ldap cfg mydomain failed to connect to server (10.10.10.10:389), source 10.10.252.4.Now 10.10.252.4 is configured as my Management interf...

kjh by Not applicable
  • 4643 Views
  • 4 replies
  • 0 Likes
  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
Labels