General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Block and NOT Alert

Is there any way of blocking an attack (threat) but not logging it?By this I mean I have some attacks that I want to drop but don't really want to get spammed in the logs because they are just 'noise' as far as I'm concerned.

apackard by L4 Transporter
  • 2725 Views
  • 3 replies
  • 0 Likes

Destination NAT Translation doesnt work properly with PA-5050

Hello Guys,Destination NAT translation doesn't work properly with PA-5050 ver 4.1.6Scenario 1: -1) Configured 213.42.55.x is mapped with 192.168.1.60 ( www.x.com) with destination nat translation on port www2) 192.168.1.60 static nat ( bi direct) with 213.42.55.xObservation : user from public host able to access the www.x.comScenario 2:1) Confi...

Resolved! How do I enable ping to a non-mgmt IP address?

Hello,I'm trying to enable ping to an external address that is not assigned to an interface? Is this possible? This address is used for NAT'ing purposes or to access an internal server.I've done the following but I'm still not able to ping the address/server:1. allow application ping from internet to my external ip.Am I missing anything?Thanks

x by L1 Bithead
  • 7052 Views
  • 5 replies
  • 0 Likes

forward from multiple WAN to one host LAN

Hi, I need a little help with PA configuration. I have two WAN links. WAN1 - 1.1.1.1 WAN2 - 2.2.2.2 and a host on the network 3.3.3.3 3.3.3.3 ip is a terminal server. All computers go through WAN1 link. I need to configure the PA so I can login to the server via IP WAN1 and IP WAN2. I ask for directions if possible. Advance thank you very much.

Panorama CPU Core usage

We recently added additional cpu cores to Panorama VM to help with performance issues. However, i have been unable to find any commands that allow me view usage on a per core basis. I just want to verify they are showing up and in use. Anyone know how? I've seen commands for PAN FW's, but not that work on Panorama

chrisp by L3 Networker
  • 4194 Views
  • 1 replies
  • 0 Likes

Resolved! real ip mapping

helli have a subnet of real IP address for example (84.85.86.1/28) and to reach this subnet i have a connectiosn from the serrvice provider with the following wan ip for example (90.91.92.1) .i configured the Palo with the real ip 90.91.92.1 and i have no problem in internet browsing and everything is working fine.i want to use the subnet (84.8...

daba1974 by Not applicable
  • 3252 Views
  • 3 replies
  • 0 Likes

Vulnerability Profile by application

Hello,My name is Jazmin, and I want to know if there's a way to create a Vulnerability Profile based on application or technology? I mean if you could select the vulnerabilities group by application, ie. "mysql" and automatically display all the associated vulnerabilities. Or I don´t know if it could be a way to create a filter by the ID of the ...

itstrap by Not applicable
  • 5009 Views
  • 4 replies
  • 0 Likes

Global Protect Certificate Request

Hi,I am looking for a way to generate a certificate request from a PAN running 4.1.5 which I can then use against our internal Microsoft CA to create a server certificate to use in GlobalProtect.Any help would be great,ThanksMei

meijones by L0 Member
  • 3343 Views
  • 2 replies
  • 0 Likes

Can the Paloalto be used as a ftp proxy?

I currently have a PA-2050 acting as a firewall to a collection of private networks (with private IP addresses). Several of these "inside" hosts do need access to external IP addresses/hosts. Specificially to ftp information out and in.Is it possible for the PA to serve as a ftp proxy, similar to the ftp-proxy service available on OpenBSD? The e...

quist by Not applicable
  • 3553 Views
  • 1 replies
  • 0 Likes

Antivirus Dynamic Update Issue

As of this writing, the latest available Antivirus update through Panorama seems to show it was released on 5/22/12, version # 750-1031. Prior to that release they had been received daily, is there any known issue with A/V updates right now? I initially believed we weren't getting any of our updates, but we were able to download the recent Appli...

dperry by Not applicable
  • 7982 Views
  • 10 replies
  • 0 Likes

Rule syntax/ordering question

We've just installed a PA-2050 in our school and I'm trying to get it configured with some basic rules but I'm not quite sure I have the syntax or ordering of my rules right to achieve the outcome I want.The simple side of things that I want to do is allow access to Facebook to members of the Active Directory group Staff Users while denying acce...

Expanding Panorama Storage Using a Virtual Disk

Hi,We are using Panorama 4.0.9 on an ESX 4.1.0.We need to expand available log storage, an we apply this procedure :Expanding Panorama Storage Using a Virtual DiskThe default Panorama installation is set up with a single disk partition for all data. 10 GB of space isallocated for log storage on the partition. To support environments where more s...

  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
Labels