This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Dual ISP with PBF + IPSec Dynamic Peer VPN

I have a PA-500 that has Dual ISPs for Internet access. I am using a PBF rule to have the traffic go out via the Primary Internet Connection. The default route out to the Internet in the routing table is via the backup internet connection.I have two exisitng IPSec VPN tunnels. There is a static route via the primary internet gateway to each one ...

rajqfs by • Not applicable
  • 3476 Views
  • 1 replies
  • 0 Likes

PA2020 Dynamic IPsec VPN

Hi I have PA 2020 and I want to configure IPsec VPN but the PA is connected to an ADSL Router and the Ouside IP address if PA firewall is private IP address. I don't have a static Public Ip address on PA side.Could it be possible that I can configure PA as dyamic client IP peer. so that only the PA firewall will initate the VPn connection.Plea...

itsecll by • L1 Bithead
  • 2627 Views
  • 1 replies
  • 0 Likes

Resolved! QOS URL Filter Category

Is it possible to apply QOS to a set of URL categories? If yes, is there a document I can go to to figure out how to implement. If no, is that something that would be valuable to to other users out there.ThanksRob

rob_moore by • Not applicable
  • 4923 Views
  • 5 replies
  • 0 Likes

why is it showed different CPU usage between a GUI and a CLI?

Hi..although it is almost same time, my machine shows different CPU usage between UI and CLI. Of course it shows a little time difference, but it is a understandable time difference. and then, it shows a big gap of a cpu usage between of them. Is it a bug?? Or Original concept due to some reason? A screenshot of a difference cpu usage is attache...

willstech by • L3 Networker
  • 5063 Views
  • 3 replies
  • 0 Likes

IPSec VPN Issue

Hi,on a PA 2020 running 4.1.0 is a VPN Gateway configured. A client PA 500 running 4.1.0 with dynamic WAN IP is configured as peer. Both devices can reach each other. In system log is a succesfull phase 1 and phase 2 and a succesfull ipsec connection. After that, a IPSec SA delete message appears and the IPSec key will be deleted. From this time...

Multiple External IP Problem

Hi allI have a brand new PA500 that I have setup and everything is working fine in the outbound direction e.g. i can access the internet etc.. the problem i have is in the inbound direction. My external interface IP address is set to 89.238.148.194/28 and I have a number of other external IP addresses that i need to NAT to internal private IP ad...

Resolved! Any ability to create Zone Groups

Is there any ability to create Zone Groups such that I can easily group zones together and then add that to security policies? I have a number of shared services which I need to grant access to a large number of zones and I find it very time consuming and somewhat error prone to continually add individual zones to a rule. Also as a feature enh...

Resolved! Rules, group, filters etc.

I realize this sort of question is difficult to answer but here goes.I am working on setting up our PA500 and am curious how others are setting their rules. As an example: there are three groups of users as defined in active directory: A, B, and C. All of which require different levels of URL filtering, times and App filtering. Of course th...

BobW by • L4 Transporter
  • 4485 Views
  • 4 replies
  • 0 Likes

URL Filtering - Blocks msn live and yahoo messenger

Hi All,I wonder if anyone is facing this issue... If you enable web-based-email inside ssl decryption rules, it will also block user to access both msn live messenger and yahoo messenger (this does not happen to skype of course). Even though, the existing security rules stated allow any application without any filtering mode, this will still hap...

eugene by • Not applicable
  • 6813 Views
  • 7 replies
  • 0 Likes

Resolved! Wildfire uploaded file disposition

I've heard customers express concerns about what happens to a file once it has been uploaded to Wildfire. If the file were the product of a spearfishing attack, it could potentially contain information about the victim that may be sensitive in nature. How are uploaded files protected from accidental disclosure? Does Wildfire dispose of the file...

dford by • Not applicable
  • 4568 Views
  • 2 replies
  • 0 Likes

Report: Top URL categories per user

I've been asked to run a report on the web usage of a specific department and I happily generated a report of users from that dept in order of how much data they have used. Then the department head asked for it to be broken down so that for each user they could see the top ten categories so he could determine whether it was business or non busin...

UKRB by • L3 Networker
  • 2601 Views
  • 1 replies
  • 0 Likes

VPN tunnel Site to site failing

hi I had a working VPN tunnel and t was working for more than 100days then all of a sudden it stopped workingand the rrrors i am getting isIKE phase-1 SA is deleted SA: MY-IP ADDRESS [500]-REMOTEIP_ADDRESS[500] cookie:ea25f2fa99b81f69:0000000000000000.04/23 03:55:52IKE phase-1 negotiation is failed as initiator, main mode. Failed SA: MY-IP ADDRE...

BBHLTD by • Not applicable
  • 5343 Views
  • 4 replies
  • 0 Likes

what is the processor named webapp3?

HiMgmt cpu was reached to 100% during a hour.i was look into a reason that why cpu usage hit a peak.processor named webapp3 was high usage during cpu reached to 100%. (it was almost 95%)i don't know what is the role of this processor.Please let me know someone who know this role of processor.Thanks,Eugene.

willstech by • L3 Networker
  • 4662 Views
  • 6 replies
  • 0 Likes
  • 24401 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks