This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Exploit:Win32/Pdfjsc.ABS will not recognized

The new PDF Exploit "Pdfjsc.ABS", which travels with a lot of Emails (for instance: "Here is the new Elster program" - Elster is the name of a german tax program), will not recognized by PAN-Firewall. Neither on Email nor on Webtraffic, so i can attache the virus on this thread.mfgManfred

mhuels by • L3 Networker
  • 5090 Views
  • 4 replies
  • 0 Likes

Resolved! Monitor NAT Traffic?

Can anyone think of a method to monitor the NAT Translation? The back story is this... We have remote access points that point to a public IP address and then get NAT over to the private address of the wireless controllers. When we migrated to the PA, we spent a few hours trying to figure out why the remote APs weren't able to communicate with...

mcw015 by • Not applicable
  • 25705 Views
  • 1 replies
  • 0 Likes

incomplete action

hellowe have our own web server which we host web sites fromI have setup my incoming nat rule followsource zone = untrusted des zone = umtrusteddes address = my internet port ip service = service-httpdes tran = my local web server ipSecurity rule source zone = untrusteddes zone = trusteddes address = my local web server ipapp = web-browsingin th...

High Dataplan CPU PA2050-4.1.6

I have only 28,000 active session at this time, which isn't a lot, and my CPU is roughly between 70-80% constantly. We are in our summer semester at school which doesn't have a lot of users on our network. I am nervous when people return in the fall they will be greated with slow internet and possibly crash the Palo Alto.We are running two Palo...

u10723 by • Not applicable
  • 2596 Views
  • 1 replies
  • 0 Likes

Palo Alto 2020 doesn't close session when using AD authentication

Hi,This might be a really easy thing I have missed but when we try to authenticate against our AD users instead of strictly by IP and zone it works fine the first person to log on. But then if you log off and someone else with less privilages logs on they get whatever access the previous person had, which could be a problem especially if the las...

Resolved! what's mean counter url_request_pkt_drop?

Hello guys.I experienced increasing constantly counter "url_request_pkt_drop" when installed PAN to customer. PAN showed that counter means "the number of packets get dropped because of waiting for url category request"So I think that means simply packet dropping related URLs when not resolved URLs. I guess packet dropping of URLs that makes pro...

ttongfly by • L3 Networker
  • 6633 Views
  • 3 replies
  • 0 Likes

Resolved! Backup and restore Config

I have a PA-500 Firewall running software version 4.1 and have to make some rather drastic firewall changes due to changing ISP's and outside IP addressing. I would like to backup and save my configuration, in case I mess something up. How can I take a backup of my current config, and have it ready in case I need to import it back in?I see you...

kaysun by • L1 Bithead
  • 4629 Views
  • 1 replies
  • 0 Likes

What 's meaning of "User '' failed authentication. Reason: Thread limit reached"

Hello,I used Captive Portal in my environment. I found log "User '' failed authentication. Reason: Thread limit reached" show on my system some time when the Captive Poratl page fail to logging in.Which Thread has limited by the system. Could you provide me the trobleshoot step or command line to show the thread limit.Thank you,Wasawath

Skype & unknown traffic

Hello PAN,It seems to me that in order to have skype working correctly - particually with multi-site PA's with Site2Site VPN tunnels in between - it is nessesarely to enable both unknown-tcp & unknown-udp.At least - all our connection problems / delivery delays seems to go away whit the above allowed.But obviously - allowing "unknown" traffi...

sitecore by • Not applicable
  • 3188 Views
  • 2 replies
  • 0 Likes

Resolved! Known Malware passing through PA to Client

Hello PAN,Today I had a client get infected with the "Windows Privacy Module" Fake AV, This wasn't cought by either PAN OS or Trend Micro while a MalwareBytes scan found it and removed it no problem. Is there something more I can do to increase the odds of my PA SG in catching these? I do keep th AV software up to date along with the PAN OS and ...

Bvance by • L2 Linker
  • 4631 Views
  • 5 replies
  • 0 Likes

Getting Syslog in through PA 500

I have a router just outside my PAN 500, ver 4.0.5. I need to get syslog information in from it for my PCI requirements. Here is my setup:The following objects are defined:INT-NPM Syslog server, IP address 172.15.10.8TWC-RTR Router, 197.148.156.124TWC-NPM NAT address for INT-NPM, 197.148.156.150TWC-NAT ...

u7483 by • Not applicable
  • 3415 Views
  • 3 replies
  • 0 Likes

URL logging in TAP mode

I have a business requirement to log URLs visited in an "out of line" manner for reporting and usage. There is no requirement to block URLs and it would be of great advantage not to use VirtualWire at this stage(still in pilot).I understand it is not possible to apply URL filtering rules(block, allow etc.) in TAP mode, and I'm pretty sure that w...

loki by • L1 Bithead
  • 2288 Views
  • 1 replies
  • 0 Likes

Multicast Support

Hi Guys,Does PAN support IP multicasting to allow one IP packet to be sent simultaneously to multiple hosts for use in multimedia applications and video conferencing?I did read somewhere that multicast forwarding / routing is now supported from version 4.1.x onwards. Is it true?Cheers...Kalyan

Stateful Package Inspection Features

Hi Guys,I was just wondering if you someone could clarify a few doubts that are lingering in my mind.1. IP Checksum Enforcement - Does PA have an option to enforce header checksums for IP headers and UDP packets?2. QoS - Does have QoS support bi-directional support for DSCP and 802.1pMany thanks,Kalyan

  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks