This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Second IP-Address

Hi everybody,how is it possible to configure a second ip-address in the same subnet as the first one on the same interface?i tried to give the interface a second one, but it wasn't committed. also an arp-entry didn't work.thx in advance

kdd by • L4 Transporter
  • 3333 Views
  • 2 replies
  • 0 Likes

When should I use a non-tunnel mode gateway with GlobalProtect? Also: license needed for HIP? SSL vs. IPSEC?

Just getting started with PA, running software version 4.1.6, and I am learning how to set up a VPN to allow remote users into the protected network. We don't have a GlobalProtect license, but single-portal, single-gateway capability is included in the basic PA license as a replacement for NetConnect.One thing that is not clear is why the Global...

ewilen by • Not applicable
  • 7056 Views
  • 3 replies
  • 0 Likes

GlobalProtect general flakiness - anyone else experiencing issues?

We're in the process of labbing out and testing a pair of 5020s running PanOS 4.1. We've configured GlobalProtect per the TechNote guide, and other than one issue where we had to add a static route pointing the VPN address space at the VPN tunnel interface, we've been able to successfully VPN in using GlobalProtect (with some caveats, mentioned ...

Resolved! GlobalProtect configuration problem

Hi,i have configured GP for remote access, and now i want to test connectivity but the problem is when i try to connect with my web browser on https://<pub_ipaddress> i dont get download site for GP client.One more interesting thing is that i have published this pub_ipaddress and port 443 for mail server. Can this be in the way or else?I u...

agrgic by • L1 Bithead
  • 3286 Views
  • 2 replies
  • 0 Likes

PAN-EDU 311

Hi colleagues,I´m just looking for a training (the 311, http://education.paloaltonetworks.com/datasheets/Advanced%20Firewall%20Troubleshooting.pdf ) but i dont find so much places (zero till now) where receive it.Did you someone got it? Could you recommend me any place to do it?Thanks all in advance,Angel.

Resolved! able to block tor browser proxy ?

Hi,I have block many proxy/anonymiser, like ultrasurf, freegate and many mores.But i cannot find a way to block TOR browser.The browser/proxy client is on this site :https://www.torproject.org/download/download-easy.html.enJust to let you know that i fill the form to get a new apps in the palo alto box.But will waiting for a new apps to be added...

How to create executive report by LDAP user group?

I have moved from a dedicated URL filter to the Palo Alto with the URL Filter add on. I now need to figure out how to create executive reports based on LDAP groups.I have LDAP groups such as Sales, Marketing, Accounting. I need to deliever a weekly report to managers which could allow them to see if they have any obvious abuses within their d...

EdwinD by • L3 Networker
  • 2131 Views
  • 1 replies
  • 0 Likes

Resolved! packet capture for unknown-tcp

Hi,I'm getting a lot of unknown-tcp on the internal network and would like to capture some packets to get an idea what this is.I tried:debug dataplane packet-diag set capture trigger application from unknown-tcp to unknown-tcpbut I don't get any packets so far.I also tried from none to unknown-tcp, same result, nothing captured.Any idea what I'm...

Negate please

I am running PanOS 4.1.7, migrating from a Checkpoint R75 platform. I have a lot of rules in place, but we are heavy into excpetions. I keep running into situations that would be very easy to handle if I simply had the Negate option.For example, I have a rule that allows domain users out to specific web apps using my URL filtering, along with...

EdwinD by • L3 Networker
  • 2847 Views
  • 3 replies
  • 0 Likes

Resolved! 4.1.7 LDAP lookup unstable

I have three active directory servers configured within the LDAP settings of my Palo Alto. I have tried using both 389 and the GC port of 3268 as per this doc: https://live.paloaltonetworks.com/docs/DOC-3120I have two 2050's in an active/passive pair. I have AD IP agents on each DC and the PAs are set to query them.The problem is that while I ...

EdwinD by • L3 Networker
  • 2766 Views
  • 1 replies
  • 0 Likes

Resolved! Clear Traffic Logs command clears Traffic Summary logs as well?

I want to 'clear traffic logs'. If I go through with that will that also clear the traffic summary logs?I would like to clear traffic logs but keep the summaries.... reason being, im upgrading from 4.0.9 to 4.1.7 this weekend and I want to cut down upgrade (log conversion) time.thanks!

choff123 by • L3 Networker
  • 3265 Views
  • 2 replies
  • 0 Likes

Resolved! Difference between Address groups and regions ?

I'm trying to find more details about the differences between address groups and regions.I added some regions to get a better reporting when I include src and dst countries.Initially I made a mistake of naming a region the same as an existing address group. I couldn't delete it, got the error message that this object is used in a rule.I know tha...

AndreasB by • L2 Linker
  • 4670 Views
  • 3 replies
  • 0 Likes

Resolved! SQL Injection Lilupophilupop (Part 2)

Hi, recently a famous SQL Injection has started up once more.Will there be a vulnerability signature update which includes this new version of the Lilupophilupop SQL Injection code?More information can be found at ISC Diary | SQL Injection Lilupophilupop style, Part 2-Dan

dciccone by • Not applicable
  • 4163 Views
  • 3 replies
  • 0 Likes

Resolved! system logs

Can anyone tell me what is going on in this log? It doesn't look like the RDC brute force attacks that i see all the time

Bagar390 by • Not applicable
  • 2855 Views
  • 2 replies
  • 0 Likes

Resolved! Track IP

Hi all,I have a setup with two ISP's where one is active and the other is redundant sitting in a VR. The routing and failover works fine but only if my actual link goes down on my main ISP which will pull the static route. Is there a way to do a track IP type command in order to check for upstream failures of the ISP.Thanks!

  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks