This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Malware Site blocking: 94.102.55.20

Hello forum, I am seeing traffic to a particular IP address from one computer that I know has been infected with a virus (we're busy getting rid of it). The connection is SSL and we are about to implement SSL decryption on our Palo, just not this second. The hoster of the IP address is Ecatel who are synonymous with with malwares. We have a vali...

Conde01 by • L1 Bithead
  • 2800 Views
  • 2 replies
  • 0 Likes

Resolved! URL FILTER QUESTION

So I have a URL Filtering Profile and I have entered a site that I want on the allowed list (play.typeracer.com). See screen shot below:When a user that is listed under that profile tries to go to the said site (play.typeracer.com) they get blocked. See screen shot below:Am I not understanding how to allow a site? Can someone point me in the ...

almay by • L2 Linker
  • 3226 Views
  • 1 replies
  • 0 Likes

no globalprotect portal license: SSL VPN config "Client VPN internal gateway will not take effect

HelloI need some help with this. The other day we committed changes to our firewall due to switching back to our original server certificate that we were using temporary a TestGP certificate which was created by PA support team to test our global protect issue.Once the changes were committed, we get the error "no globalprotect portal license: SS...

Resolved! HA Sync Error on Commit

Hi All,I have two PA-2020 in Active/Passive HA. Both on same code (v4.1.4) and latest subscriptions.The pair have been running fine for almost 12 months.Recently, when I tried to Commit a fairly basic change on the Active node, it fails to Sync with the passive node.The Passive logs shows an interface config mis-match: one of the Trust zone inte...

POC Plan

HuiWas wondering if anyone has a POC Plan/Criteria Sheet to test PA5020 against Fortinet & Sonicwall.Appreciate alll the help.ThanksManoj

aggeios by • Not applicable
  • 5343 Views
  • 5 replies
  • 0 Likes

Resolved! PANORAMA MODIFY EXPAND STORAGE

Hello,I have installed a panorama with extended disk of 1TB and now I want just use 500 GB. I can reduce the size of my virtual disk without reinstall the system??thks for your help!

alle by • L3 Networker
  • 3149 Views
  • 1 replies
  • 0 Likes

Resolved! About policies PA500

I want to know because when I make a change in my PA500, I get the following:- Rule 'Accounting' shadows rule 'User'- Rule 'Shopping Paniagua' shadows rule 'portable users'Thank you very much

Resolved! Any way to Manually Sync LDAP Group Mapping?

Is there any way to manually sync the LDAP Group Mapping/User Identification in Palo Alto? We have the sync interval set to 4 hours, but there are times where would would like to sync manually.

jambulo by • L4 Transporter
  • 54118 Views
  • 1 replies
  • 2 Likes

Cannot create rules based on users

Hi, I've installed a new PA-500 device. I've also installed the UID-Agent and it's communicating with the Palo Alto because:"show user ip-user-mapping" return results with many userson monitor tab I have the users displayedon acc tab i also statistics with usersBut when i want to create rules and add a user it doesn't show any user available.

licenselu by • L4 Transporter
  • 4178 Views
  • 6 replies
  • 0 Likes

Resolved! How to detect DNS TXT messages

is it possible to detect and furthermore block DNS TXT messages via a Threat Signature? The goal is to disable DNS Queries regarding TXT resource records.Not sure if the context dns-req-section does the job...Did anyone ever try this?Thanks!Stefan

Virtual Routers

We recently switched ISPs and they assigned as a 32 address block that sits behind 1 address. i.e 71.100.100.192/27 block behind 71.100.100.50/30. We are now connected to the ISP with the PAN addressed as 71.100.100.50/30 with a default route destination of 71.100.100.49. That router knows of the IP block we have. Our mail server'sv outside dns ...

Resolved! Difference between gtalk and google-talk?

In todays content update one can read:"Modified Decoders (6) Name gtalk-p2p ipsec-esp-udp jabber ssl google-talk oracle "How come gtalk-p2p isnt named google-talk-p2p or is gtalk something else?Yeah I know this is a decoder which is not browsable (and therefor not found in Application Research Center ) b...

mikand by • L6 Presenter
  • 2714 Views
  • 1 replies
  • 0 Likes

Resolved! PCI and WSUS

I need to create rules for a PCI firewall for a WSUS server. Microsoft does not publish IP's for their update points so this is problematic on a PCI firewall (or it seems to me). I can either:1) create a rule which allows the server out to "any" using port 80 and 4432) use url filtering (I'm new to the box and it seems this opens the network to ...

Gerry_RH by • L0 Member
  • 5337 Views
  • 4 replies
  • 0 Likes

Resolved! Captive Portal Certain AD-Users

I have a unique situation. Currently, I have a 10,000 + user based network and implemented Captive Portal Policy. We have certain AD accounts that auto login with certain machines. We want to always captive portal those certain logins. So I am wanting to ignore the AD authentication for those forcing them to be CPed. Any ideas on the best wa...

netslh by • Not applicable
  • 2494 Views
  • 1 replies
  • 0 Likes

Resolved! help to configure a DMZ and NAT

hi,i need a little help to configure a DMZ. here is our situation:interfacesethernet1/1 - 1.1.1.1 (public - NAT clients)ethernet1/1.1 - 1.1.1.2 (public - NAT DMZ)ethernet1/1.2 - 1.1.1.3 (public)..ethernet1/6 - 10.10.30.1 (DMZ).ethernet1/8 - 10.10.20.1 (clients)routingdefault route 0.0.0.0 -> 1.1.1.1 (works!)NATclientOut dynamic-ip-and-port et...

assona by • L0 Member
  • 4257 Views
  • 2 replies
  • 0 Likes
  • 24392 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks