General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! CLI equivalent of GUI task

Is there a way to determine the CLI equivalent of a command/task done within the management GUI?

For example, with PAN 4.1.2, what is the CLI equivalent of the GUI when you import a pkcs12 format certficate?

thanks, Jeff

Jeff_K by L2 Linker
  • 2698 Views
  • 4 replies
  • 0 Likes

IPSec Tunnel QoS

I have a PA-2050 running 4.0.7. I have an IPSec tunnel that runs between 2 sites (one is a Palo, the other is ??)

I would like to guarantee some level of bandwidth available for this tunnel, to ensure that it gets a level of priority at least over bas

...

Resolved! Using PBF To Split Services Between ISP's

I have a need to split the traffic going to and coming from my Exchange server based on service. Currently I have both SMTP and 443 traffic coming into and going out of the same ISP (we'll call it A). ISP A is also the default for all incoming and ou

...

Is HTTPs traffic correctly rdirected in PANOS 4.0.8?

Hello,

We have an issue with captive portal not correctly redirecting https traffic. The https traffic is sometimes allowed without redirection to the captive portal, and sometimes dropped, without any logs, the only way to see the issue is to make pa

...

asia by L3 Networker
  • 2062 Views
  • 1 replies
  • 0 Likes

filter ssh v1

Hi

I have a request to filter in the firewall ssh v1. Is there any way to identify and filter ssh v1? can the firewall identify ssh v2 some way?

Nested Palo Alto Object Groups

Hi,

Does anyone know if there are any recommendations on the use of nested groupings within PA policies - specifically the PA objects?

In terms of maintaining 'easy to read' policies I wanted to make use of nesting to keep the policies simple, which wi

...

apackard by L4 Transporter
  • 2336 Views
  • 2 replies
  • 0 Likes

Creating Reports on Panorama

Hi,

Whene creating reports within Panorama, and whene choosing database for the report what is the diffrence between panorama database such as "panorama traffic log" and the other databases such as "traffic log".

Regards.

asia by L3 Networker
  • 2234 Views
  • 2 replies
  • 0 Likes

Problems with Aggregate Ethernet in HA configuration

Hi all,

i'm setting up two PA 5020 in Active/Passive HA and I'm having some problems with Aggregate interfaces. I'm using 4 ethernet interfaces per device:

ae.1 - trust zone (two physical ethernet interfaces)

ae.2 - untrust zone (two physical ethernet i

...

Resolved! PA blocks sites that sites use for content delivery

We have a very strict policy for some computers that only get access to specific sites.  However under this model sites such as Wellsfargo use a third party to host their content and data, which then gets blocked as well until we add it to the allow

...

bschaper by L2 Linker
  • 4353 Views
  • 3 replies
  • 0 Likes

TCP Ports

Any one know how to add the ports into this firewall. I have a dmz server that I need ot add ports on the firewall  to reach it.

Thanks

Frank

Resolved! Virtual systems and Panorama

I'm looking at managing multiple virtual firewalls in the same physical firewall with Panorama and I am wondering if you can have two zones with the same zone name assigned to two virtual systems? I understand that all the devices in a Panorama devic

...

Jinx by L1 Bithead
  • 1771 Views
  • 1 replies
  • 0 Likes

Resolved! Hold Music

I think you guys should be able to do better than a 10 second loop of the same thing.  I assume this is done to encourage people to hang up or leave a message as it slowly drives the caller insane.

Blocking & AV

Hi - we current;y have our PA4050s in aleret mode only on every rule for AV. If we device to turn this to Block for specific rules - what does this actually do if it identifies a virus? Cheers.

fmd by L3 Networker
  • 7381 Views
  • 22 replies
  • 0 Likes

Cabinet File corrupt error

Greetings,

Recently upgraded to v4.1.3 and going through the process of installing the Global Protect client on the workstation.  I've tried this on Win 7 32bit and 64 bit and keeps throwing corrupt file error.

Screen dump attached.

Cheers

asabadin by L1 Bithead
  • 2435 Views
  • 1 replies
  • 0 Likes
  • 24197 Posts
  • 100 Subscriptions
Top Liked Authors
Labels