This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Demo Rules Examples from Real-Life???

I am looking for documentation of example rules (Real-World rules) much like Checkpoint has if you run their SmartDash board in demo mode. It illustrates a large corporation's simple to complex rules for about every rule you can thing of. A novice to veteran can learn from these example rules. I can't find anything like it in KnowlegePoint bu...

shiftkey by • Not applicable
  • 3867 Views
  • 2 replies
  • 0 Likes

PAN application for Ironport updates

Hello,I have an Ironport behind my PAN. In the logs, I can see it going toward the Cisco update server.Nevertheless, the application is sometimes "web-browsing" and sometimes "http-video".Do you meet the same behavior?Regards,Guillaume Dupuis

gdupuis by • Not applicable
  • 3244 Views
  • 2 replies
  • 0 Likes

IP to User Mapping Error

Hi,I'm having problems in resolving IP address to usernames. PA2050 is integrated with active directory to resolve IP address to usernames. We also create security policies based on usernames. This configuration works great in version 3.1.6 but after the upgrade to version 4.1.4 we encountered errors. Some IP addresses are unable to resolve to t...

Resolved! Question regarding initial configuration / setup

Hi, Everyone,I have a question that I was hoping I could recieve some help with; I am doing an initial configuration of my firewall (I am new to Pan-OS, and I can't seem to ping my upstream router). I have an 802.1q trunk link coming into my device with a single VLAN on it (VLAN 3357). When I do a packet capture, I see the hearbeat traffic fo...

dsulli99 by • Not applicable
  • 5429 Views
  • 3 replies
  • 0 Likes

Resolved! Mac of local layer 3 VLAN interface

Hi, EveryoneI am sorry I am posting a few questions today I am still learning the PAN-OS platform and this is kind of a basic one; is it possible to tell the MAC address of a local layer 3 VLAN interface? I can ping it, and verify that the IP address is configured locally on the interface, however the MAC does not show up in the local VLAN inte...

dsulli99 by • Not applicable
  • 5080 Views
  • 1 replies
  • 0 Likes

Firefox11 log details not showing up

I have updated to firefox 11 and now the log details window starts to pop up but just sits there spinning trying to display the data.I have tried this on a linux installation and windows as well. Is anyone else experiencing this and if so other than backing down version is there a fix for this?Thanks in advanceMike

mhorne by • L1 Bithead
  • 5471 Views
  • 8 replies
  • 0 Likes

How to confirm Email Scheduler send test email

Hi AllI would like to set a Daily schedule report and send it by Email Scheduler, the gateway of email server profile is our smtp-relay server(win2003 smtp service), and it will transfer all email request to Exchange server, all in our environment client can send email normally, however when i complete settings and click "send test mail" button ...

ftp server

Hello,I can't make active ftp working.My ftp server is internal server (IP is public).My policy accept ftp application on default ftp application in inboud (Internert -> ftp server).How to make active session works ? Passive works fine.Thanks.Franck.

Resolved! QoS with virtual Wire

Hi guys....It`s possible to create QOS when PAN firewalls was deploy on virtual wire mode ?Best Regards.Thiago Lima.

Thiago by • L3 Networker
  • 3585 Views
  • 1 replies
  • 0 Likes

How bit torrent works ? PAN OS 4.1

Hi guys ,I want to know how bit torrent works.....First of all , i have a policy that block all trafic by bit torrent.I did other policy to allow some users to use bit torrent. But don`t works this policy.I read this https://live.paloaltonetworks.com/docs/DOC-2391 but i don`t understand so good.So somebody know what i need to do ?Best regards.T...

Thiago by • L3 Networker
  • 3023 Views
  • 2 replies
  • 0 Likes

Resolved! Skype and PBF

Hi all,We have two ISP's connected to our PA FW (4.1.5). ISP A (e1/5) is the default for all outbound internet traffic. ISP B (e1/7) is the backup link. Now we would like to use the backup link for all skype related traffic. Until now I did not have success.I have created the follwoing PBF rule:But skype still gets forwarded to ISP A. Is there a...

gafrol by • L4 Transporter
  • 4611 Views
  • 6 replies
  • 0 Likes

use Palo as an NTP device

Hi Guys, We have 2 * 2050's running 4.0.7 here and I was wondering if I could use these devices as NTP servers for other devices to sync against? I've looked through the gui but can't see any way to do it so far.CheersChris

Resolved! About traceroute APP-ID

Hi guys.I found that traceroute APP-ID on Applipedia web-site as belowSo I updated newest signature of Application and Threat that version to my PA box is 303-1361 (2012/04/17) but I could not find the traceroute APP-ID on my box.Why it is deffrent between newst signature and applipedia app-id list? When do I use the traceroute app-id?Thanks.Reg...

ttongfly by • L3 Networker
  • 4030 Views
  • 2 replies
  • 0 Likes

Filter length

what is the maximum filter length for the log menus on the Monitor tab? what is the maximum length of a query on a report?I am pretty sure I have exceeded it with the following query:(app eq unknown-tcp) and (zone.dst eq sample.com) and (port.dst neq 23) and (port.dst neq 1023) and (port.dst neq 1098) and (port.dst neq 1108) and (port.dst neq 13...

jcostello by • L4 Transporter
  • 3849 Views
  • 3 replies
  • 0 Likes

Resolved! SNMP and 4.1 / 4.1.1

Under 4.0.x we were recording the traffic on the public interfaces of our PA500.After upgrading to 4.1 this stopped working.We dropped 4.1.1 on for other reasons but still no snmp.If I try to do a snmpwalk on the PA500 I get nothing at all.I couldn't find anything applicable in the 4.1 documents.SNMP under Device -> Setup -> SNMP Setup app...

  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks