This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Difference between session start vs end when doing DENY

The difference (generally speaking) between "log on session start" and "log on session end" (for ALLOW rules) is that the "session end" will also log application and trafficvolume however it will not show up in the log-files until the session really is ended (which means for debugging you often want on session start aswell to see when the packet...

mikand by • L6 Presenter
  • 5597 Views
  • 1 replies
  • 0 Likes

Large User-ID Deployments

All,We're in the process of migrating from a WCCP Proxy implentation for URL filtering to the Palo Alto solution (LOTS of work needs to be done obviously!) and we're starting to work with the User-ID Agent and have some questions..First, I'm curious how large of User-ID implentations are out there user wise? We have about 16k users system wide, ...

steveo by • L3 Networker
  • 6837 Views
  • 6 replies
  • 1 Likes

Custom Block Page

Hi I'm finding it really difficult to upload a customised url block page. Each time I do it only the default page appears. Out of around 20 times of uploading the edited txt message (custom block message) it's only ever updated to the new message on one occasion. Is anyone else having these problems? I'm running 4.1.3ThanksRod

djrodb by • L3 Networker
  • 3939 Views
  • 4 replies
  • 0 Likes

Resolved! Logs retained after vSys deleted?

If a vSys is deleted, i'm assuming (dangerous i know), that the logs related to that vSys are deleted off of the device.Is this a valid assumption?What about any logging forwarded to Panorama, are they deleted or retained?If not a valid assumption, is there a process to manually clean out these logs?Thanks,kurt

u11756 by • Not applicable
  • 2823 Views
  • 2 replies
  • 0 Likes

CNSE Review Guide

Has anyone have any idea what kind of topic you will be asked? Want to start reviewing for this certification.thanks

friento by • L3 Networker
  • 6075 Views
  • 8 replies
  • 0 Likes

Palo and TMG

HelloI have a tmg box at the moment that publishes our web sites, can i still leave that still setup and point the palo at the tmg for the web sites we publish? or how do i do that with the palo in place.Mark

Office 365 App Detection

Hi, I was wondering if there are any plans or a method how to detect Office 365 traffic?We have no URL scanning license on the box, so we depend on the App detection method.Because all traffic is a SSL connection, PaloAlto reports the traffic as general SSL Application.Many thanks for any suggestion about my issue.

u2343 by • Not applicable
  • 2814 Views
  • 1 replies
  • 0 Likes

No IP addresses on HA interfaces

Hi all,I'm working for a new company building out several new data centers. They got a jump on getting things up and running before hiring their own resource and had a consultant setup a couple of pairs of PA-2050s. They are active/passive. The consultant set up the HA interfaces with no IP addresses. Is this an OK configuration? They seem happy...

GV27 by • L1 Bithead
  • 2273 Views
  • 1 replies
  • 0 Likes

commit is always there

I have noticed that whenever I log into my firewall now the commit option is always available. I haven't made changes yet I can click commit. Whats up with that? I would expect it to be grayed out like right after I do the commit.

Dropbox - allow web app but block client?

Our IT department has decided to allow Dropbox, but only the web interface. Installed client traffic should still be blocked.Since the only identified app in Palo Alto is dropbox, we cannot block that app.Is there any suggestion on how can I do this? I've played around with SSL decryption but I get conflicting results.

oaus by • L0 Member
  • 11673 Views
  • 8 replies
  • 0 Likes

Vulnerability Protection - BlockIP

I have configured a vulnerability protection profile to blacklist the ip addresses of attackers for all brute force login attempts with the signatures provided in the threat database. The profile works very well. However, i would now like to see the list of currently blacklisted ip addresses. I know it only blacklists for up to an hour, but th...

Resolved! Threath Monitor / App Monitor

Hi all,Does anybody already succeed to auto send either Threat or Network monitor by email ?Or able to export ? or re-create ?Thanks for your hlepVincent

VinceM by • L5 Sessionator
  • 6093 Views
  • 4 replies
  • 0 Likes

Resolved! Problems with user mapping

Hello.I have a little problem with user-ip mapping i have instaled PAN Agent on a server configured it and started from what i can see it reads security logs and from there maps ip to a user. Those logs presents users as shortdomainname\user. The problem is when device have to compare it to a LDAP mapped groups where users are identified as long...

Bigtom by • L0 Member
  • 3789 Views
  • 2 replies
  • 0 Likes

Updated custom response page doesn't show

Hi allFirst post, better behave I've been fiddling around with the antivirus block page on our PA5050-boxes with panos 4.1.4 but for some reason the page I upload to the boxes won't show. It did change once (uncertain why), but if I now try to either restore the default or upload an updated block page, nothing happens, the box keep displaying t...

secomike by • Not applicable
  • 5529 Views
  • 7 replies
  • 0 Likes
  • 24381 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks