General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4115 Views
  • 0 replies
  • 0 Likes

Exclude certificates generated by a third party CA from being decrypted

Hello, The use is very simple : many government agencies (social security, tax collecters...) are using SSL websites signed with own CA (which is great for their own security) but creates many problems with PA decryption. Is there a way configure PaloAlto to exclude from Decryption of certicates generated by a list of third-party CAs I would fee...

essnet by L4 Transporter
  • 2441 Views
  • 2 replies
  • 0 Likes

Problem updating software

Hi,I have a brand new PA-200 that for some reason refuses to update it's software.This is the error I get when I try:"Successfully downloadedPreloading into software managerImage File Authentication ErrorFailed to load into software manager. Please retry.Post processing failed. Please retry."Does anyone know what could be wrong?Thanksmario;

MarioG by L1 Bithead
  • 4865 Views
  • 5 replies
  • 0 Likes

Resolved! Extended validation certificates, Global Protect

Hi all,I'm trying to use Extended Validation certificates on my Global Protect so that users connecting to the web-portal will see our EV certificate. I've successfully imported my certificates and assigned them as the server certificates in both the Global Protect Gateway and the Portal. When I connect to the portal I get "no green bar"... I've...

Resolved! PA-200 - SMTP \s

Cant send emails out. Reviving emails works fine.If i try to telnet out to a known working MX it times out.tried to allow outgoing firewall rules with app ID and Service. nothing works.Running PAN OS 4.1.7This worked on earlier versions of the PAN-OSRegards,Peet

PoTski by L0 Member
  • 3724 Views
  • 1 replies
  • 0 Likes

Resolved! Internet Explorer 0 Day - Sept 17, 2012

Is there a signature for the new IE 0 day yet?https://isc.sans.edu/diary/IE+Zero+Day+is+For+Real+/14107http://technet.microsoft.com/en-us/security/advisory/2757760There is a metasploit module out so.. that means there a working exploit 'in the wild' to base a sig on...Normally I find the CVE and then look it up in Threat Vault which will give me...

choff123 by L3 Networker
  • 9849 Views
  • 18 replies
  • 1 Likes

Resolved! Sending user logins via Syslog

Hi all,I have not found a way to send user logins to an external syslog server. I have traffic allows/denies coming through successfully, and "misc. system events." Is there a custom configuration that needs to be done to get user login date/time? We need this for compliance.Thanks,Eric H.

eharvey by L0 Member
  • 4853 Views
  • 5 replies
  • 0 Likes

Resolved! clear arp

Hi,Do we have a option to clear arp entry for only one entry ?I tried this command but it seems it clears all arp for an interface.

Resolved! Chrome Bypassing Captive Portal for Google Services

Hi,PANOS 4.1.6Client OS: Windows 7Client Browser: Google Chrome 21.0.1180.89I have PAN running with CaptivePortal (Public Certificate with AD Auth profile). Everything works fine when I use Firefox, Chrome and IE (in the case of IE except for the small hitch discussed here in this forum when running on Windows7). I am prompted to Authenticate We...

actibit by L2 Linker
  • 14070 Views
  • 18 replies
  • 1 Likes

Resolved! OSPF between PAN devices

Hi all,I have the following scenario:CPD 1: Internet ISP1 -- PAN1 -- ROUTER1CPD 2: Internet ISP2 - PAN 2 -- ROUTER2And a layer 2 connection between CPD1 and CPD2 (in different locations). Initially, there were only router1 and router2 (with their respective ISP Internet connections) with OSPF area 0; now, I've added a PAN device to each CPD, in...

Resolved! is this possible for syslog

Hi,We want all policies option log forward as syslog.Can we make this for all policies at one time or shoul we go to every policy option to select syslog. There are many policies.Thanks.

PA500 arp cache limit reached - any ideas?

Hi I have 2 PA500 firewalls running in a active/passive HA setup, the firewalls are fully integrated into active directory using the Identification client for security polices all clients on the network are set to use our core switch as their default gateway and the switch has a route set so it uses the firewalls IP as its gateway. Problem is th...

  • 24333 Posts
  • 124 Subscriptions
Top Solution Authors
Labels