General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1693 Views
  • 0 replies
  • 0 Likes

PA-500 Auto Reboot

Good Morning Everyone

Can anyone shed some light on why my PA-500 will auto-reboot after the following incident logged on the system log

"description contains 'infra-group: restarts exhausted, rebooting system"

We running the latest 4.1 OS

How can we pr

...

u7285 by Not applicable
  • 3195 Views
  • 2 replies
  • 0 Likes

Resolved! port forwarding external to internal

Hi,

i just want to create a "easy" port forwarding rule from external (public ip), port 52516 to a internal server port 52516, but i can´t get it done on a PA-2050. it´s a web-service running on that internal server....

i´ve created a service/applicati

...

Global Protect Configuration Help - Windows 7 issues

So I have a few questions.  We have netconnect working just fine for our mac users (PanOS 4.0.4) but we get an error about being unable to build nat interface on all windows 7 clients.  If I enable the global protect feature, do I need to have it ans

...

thesl by Not applicable
  • 6322 Views
  • 1 replies
  • 0 Likes

Resolved! PA dont catches Trojan JS.Redirector

Hi folks,

the Palo Alto Networks threat prevention is not able to recognize the following code as malicious:

<script>d=Date;d=new d();h=-parseInt('012')/5;if(window.document)try /
{new document.getElementById("qwe").prototype}catch(qqq){st=String;zz='al...

mhuels by L3 Networker
  • 2964 Views
  • 3 replies
  • 0 Likes

VPN WITH PIX AND FQDN

hello,

I try to migrate a vpn between pix and palo-alto

when I try to generate traffic I can see the following error :

IKE phase-1 negotiation is failed. When pre-shared key is used, peer-ID must be type IP address. Received type FQDN

I understand that m

...

alle by L3 Networker
  • 4044 Views
  • 5 replies
  • 0 Likes

Resolved! policy based forwarding to proxy

We use ntlm (CP) to authenticate our users against the PA.

We want any http traffic forwarded to a proxy. The proxy would have http access to the internet through the PA. I was thinking of using a policy based forwarding rule to forward service-http t

...

dieter_b by L4 Transporter
  • 7312 Views
  • 4 replies
  • 0 Likes

Skype only zone configuration...

Hi!

I am trying to setup a zone with Skype only configuration with the following "Application Group":

  • skype
  • skype-probe
  • web-browsing

The end result is that Skype voice works fine; however, Add Contacts feature in Skype doesn't work.

I am testing with the 5

...

gebis_it by Not applicable
  • 3503 Views
  • 4 replies
  • 0 Likes

File Uploads to Wildfire

I have seen another thread on this issue in the KnowledgePoint database; however, there was no resolution or answer to the question.  I have setup the Wildfire configuration on all of my PA500's per the documentation provided.  When matching the fil

...

Steven by L1 Bithead
  • 4082 Views
  • 4 replies
  • 0 Likes

Resolved! show config running xpath syntax

Hello,

I try to figure out the correct sytax for the xpath option of the show config running CLI-command (running PAN-OS 3.0.6).

? says:

+ xpath    xpath of the node to retrieve

but every way I tried to describe the node I want gives me a "Invalid syntax

...

PAkeeper by L0 Member
  • 10431 Views
  • 5 replies
  • 0 Likes

Bittorent session identification

On PA-500 with PAN-OS 4.0.7, I have seen a session on dashboard-top application-last hour, but in corresponding ACC and in Monitor Traffic Log I don't find a record session. There is any reason ? Thanks

lauro7 by L0 Member
  • 3733 Views
  • 5 replies
  • 0 Likes

After migration from Checkpoint, any tips?

All,

We recently migrated from Checkpoint to PANOS (via the conversion tool) and so far things are looking pretty good. The next step of our project is to convert port based rules to app type rules and I wanted to get some feedback, tips, etc from oth

...

steveo by L3 Networker
  • 5049 Views
  • 4 replies
  • 0 Likes

Service Objects and multiple ports

I have the need to create a rule with three applications, ncp, ms-update and ssl.  Two of those applications use their standard ports - ncp (524) and ms-update (80 & 443).  The ssl application uses port 13000 - not the standard 443.

  1. If I create a sing
...

  • 24216 Posts
  • 117 Subscriptions
Top Liked Authors
Labels