General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

LIVEcommunity System Update - Delayed

UPDATE 11/8/23 11:43 a.m. EST:

LIVEcommunity’s System Update will be delayed. This means your use of LIVEcommunity will not be impacted this week (11/8-9), and you can proceed with business as usual.

 

Thank you again for your patience and stay tuned

...

jforsythe by Community Team Member
  • 281 Views
  • 0 replies
  • 0 Likes

New Area for Engineering Blogs on LIVEcommunity!

We are excited to announce a new Engineering Blogs section on LIVEcommunity, exclusively curated by Palo Alto Networks engineers!

 

This dedicated area will be home to technical posts about Palo Alto Networks innovations to build scalable and reliabl

...

jennaqualls by Community Team Member
  • 532 Views
  • 0 replies
  • 1 Likes

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 1820 Views
  • 2 replies
  • 10 Likes

How to identify specific object usage ?

Hello,

Is there a way to easily find out where a specific object is used in the policies ?

I know that I can use the filter filed in the policy tab (by using "drag and drop" or filter drop-down menu). However, when using group objects for multiples add

...

ldormond by L3 Networker
  • 2914 Views
  • 7 replies
  • 0 Likes

Resolved! User Identification - 4.1 LDAP - AD

Hi,

I have upgraded to 4.1 and added a ldap-server profile to the config so the firewall does the query instead of the user-id-agent.

When I go to group-mappings settings ( under user-identification ) and select the tab 'Group Include List',
I can see t

...

paulmeys by L1 Bithead
  • 2824 Views
  • 3 replies
  • 0 Likes

Retrieve Primary group of a user

Hi,

I've just upgraded my PA-2050 to 4.1.1 and configured LDAP servers and group mapping for building some policies rules based on AD groups.

Everything works well except one thing.

The primary group of a user is not retrieved.

And this is a problem beca

...

pboegli by L1 Bithead
  • 1911 Views
  • 2 replies
  • 0 Likes

PA 2050 running 4.1.1

Just curious if anyone else notice performance issues with their palo boxes after upgrading to 4.1.1? 

I’m getting a lot of commit failures, cannot connect to the device errors or the page just takes 3-5 minutes to load.  I’m also noticing that when

...

Globalprotect client failing authentication

We have had several instances where our end users are not able to connect with the globalprotect client since upgrading to PANOS 4.1.  When I check the system log file I see the following errors

2012/01/18 09:45:03info     globalp portal globalp 0  G

...

jbland by Not applicable
  • 2379 Views
  • 3 replies
  • 0 Likes

Resolved! Using "Any" as zone for a converted policy

Hi

I'm converting a security policy from a Check Point device to a PAN device using the PAN converter. By default the converter sets source and destination zones as "Any". Can I use the rule like that? Is there any problem that such configuration migh

...

Multi Gateway

Hello,

I need to install a PA200 for a internet breakout. Since i can't change the IP Subnet, I tough to change the default gw to the PA and use the PA as a router for traffic to the WAN (same subnet). But my problem is now that traffic comming from t

...

gsteiner by L3 Networker
  • 3305 Views
  • 8 replies
  • 0 Likes

OSPF - Reditribution intra OSPF

Hello,

My PA is connected to 2 OSPF areas and I want to take some routes from one area and send them to the other one.

I try to do a redistribution profile but it only send my directly connected routes, not those learned from OSPF.

Is there a way to do

...

rroger by L1 Bithead
  • 1980 Views
  • 1 replies
  • 0 Likes

Resolved! URL-filtering Profile

Hi!

Friday we upgraded our devices to 4.1.0.
Everything is working ok, the gui is pretty fast, which is nice, only:

When we want to edit a url-filtering-profile, the list of categories is empty.

Can someone confirm this running on 4.1.0 ? ( or is it just

...

paulmeys by L1 Bithead
  • 6539 Views
  • 7 replies
  • 0 Likes

New feature - URL Allow List Object

Could you add a feature that creates "URL Allow List" objects and "URL Block List" objects. We have several  URL Filtering Security Profiles and try to keep our business partner sites in the "Allow List" but have to manually add them to each profile.

...

jmck9999 by L1 Bithead
  • 2347 Views
  • 3 replies
  • 1 Likes

Log Exporting

I am exploring the best method for me to export and create reports based off of log data from a PA-4020, and have a few questions.  Real-time reporting hasn't been determined just yet, but since I can essentially get real-time from the PA GUI I am th

...

UserID - possible to identify AD computer name

I have firmware version 4.1.1 and use the appropriate User-ID program for this firmware. I undretand how it all works for Active Directory user accounts, but what I want to know is can it be used to scan AD containers that only contain computer names

...

Problem with Authentication Profile

I had to do some changes to the Allow List of a Authentication Profile based on LDAP (AD) but i'm constantly recieving "ajaxUserIdAgentUserHandler:: Error in retrieving data: Not Found"

I'm sure that this was working previously. Additionaly I've manua

...

PanAgent AD Groups disappear

Hello all,

We have a strange issue.


Suddenly and without any cause the AD users in our PAN device losses the AD groups that they belong to. This is a huge problem cause the security policies configured by groups does not work.


The strange thing is if w

...

Top Liked Authors