General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! About non-syn-tcp option

Hello guys.

As you know that PAN has got a option of session that non-syn-tcp.

I have a question about non-syn-tcp.

When reject non-SYN first packet was false (when non-syn-tcp was not dropeed) and non-syn-tcp session already establised throught PAN dev

...

ttongfly by L3 Networker
  • 7425 Views
  • 2 replies
  • 1 Likes

Pros vs Cons with PAN?

I guess it would be a bit biased to ask for Pros vs Cons of PAN in the supportforum of PAN  but I recently stumbled upon an article (which I wish to share) regarding PAN which I think might be of interrest for most of us in this forum:

http://www.cym

...

mikand by L6 Presenter
  • 2238 Views
  • 1 replies
  • 0 Likes

Reports based on Specific Departments

Hi Guys,

Is there any way on the Palo Alto Firewall and Panorama to generate a Custom Report based on Departments from an Active Directory.

For example; me as a user Kal is a part of the Technical Department.  Will it be possible to have a report on so

...

User identification not working properly

Hi,

we are facing the issue that the user identification is not working properly.

I am running PAN OS 4.1.4 on a PA-200 device and User-ID-Agent 4.1.4-3 on a Windows 2008 R2 member server.

The UI agent is connected to both the DCs (Windows 2003 servers

...

cschmi by Not applicable
  • 4081 Views
  • 7 replies
  • 0 Likes

Connecting a videoconference to PAN without using NAT

Hello All,

I have this small question here that I hope can find answers or suggestions.

Currently we have a videoconference unit that was connected to the internet via NATting in the PAN ? I am wondering if there is a way to make it non-nat by connecti

...

mmxong by Not applicable
  • 1615 Views
  • 1 replies
  • 0 Likes

application vs url categories dependencies

I want to allow access to Twitter, but block all other social-networking services.

The obvious approach is to allow the Twitter application and then have a rule blocking the social-networking category for web-browsing and ssl, but this doesn't work, T

...

Resolved! How to handle jdownloader?

Hi guys,

I was wondering what the best way to handle jdownloader or other download managers? Are they treated as seperate apps? Is the only way to deal with this via QoS policies? I'd love to hear about your experiences.

Alex

Abs by L3 Networker
  • 4891 Views
  • 12 replies
  • 0 Likes

Resolved! execute command on other device

Hi, Live Community,

Can you please tell me whether or not it is possible to execute a command on the other device in PAN-OS, and see the output (without logging into the other device, for example)?


Thank-you so much,


Dan Sullivan

dsulli99 by Not applicable
  • 1801 Views
  • 1 replies
  • 0 Likes

Google Docs Phishing Issues

So I dont know if its just us but we are getting hammered with phishing requests to google docs web sites. The latest is:

https://docs.google.com/a/smps.k12.ok.us/spreadsheet/viewform?formkey=dGdKTFpTcW5KVVF1UGxJTFJ0aF9UdHc6MQ

My URL Filter wont block

...

jhickey by L3 Networker
  • 3131 Views
  • 6 replies
  • 0 Likes

PA 5050 Shadow Rule Error

Hi all,

I am configuring PA 5050 and populationg the security policy rule base. While i am making ule bases , and during commit , i am geting the error message that the Rule3 (suppose rule 3 ) is shadowning Rule 4 in the sequence. I am getting this e

...

itsecll by L1 Bithead
  • 4758 Views
  • 4 replies
  • 0 Likes

Resolved! How HA active/passive 2000 series works

Hi Guys ,


I have a dubt about HA Active/passive

How it`s works ? i need to  have  a float IP ?

OR my 2 appliances need to have the same configuration ?

I see some docs , but i don`t understand how HA works.

So if somebody can help me I`m using 4.1.3 PAN

...

Thiago by L3 Networker
  • 4846 Views
  • 12 replies
  • 0 Likes

User ID agent / User-IP-Mapping issue

Hello,

I have simple request: created access rule based by group.(and this part looks clear and working to me). Problem that i can make User-IP mapping to work correctly. With desktops i do not see any issues because their users do not change mostly a

...

rimbalt by L1 Bithead
  • 2247 Views
  • 3 replies
  • 0 Likes

PA-2050 commit frustration

Hello,

We have 2x PA-2050 devices in HA running 3.1.10 and I'm frustrating about commit time, it takes like 5-10 min.

Can I expect significant improvement, commit time speaking, with upgrade to 4.1.5 ?

Field experiences in commit time with 4.1.5 ?

Or sho

...

Resolved! Delay in SSH prompt

Hi, All,

I have a hopefully quick question regarding my Palo Alto 5050 firewall pair; whenever I go to log in via SSH, I get a delay of approximately 5-10 seconds before I am actually prompted for a password.  Is this normal?  This is more of a nuisan

...

dsulli99 by Not applicable
  • 3989 Views
  • 4 replies
  • 0 Likes
  • 24235 Posts
  • 99 Subscriptions
Top Solution Authors
Top Liked Authors
Labels