General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 2896 Views
  • 2 replies
  • 14 Likes

Resolved! add ping as custom service

Hi

I have a rule with some custom ports in the service tab, but how do I add ping then? - does not work if I dont have "application-default" in the service tab.

Thanks

FlexyZ by L3 Networker
  • 3492 Views
  • 1 replies
  • 0 Likes

AD Group PDF Summary Report

Hi

I configure PDF Summary report for AD group.The way i did , i create the Custom AD group report and attached this custome report to PDF Summary report.But the  generated pdf summary report doesnt have any data it shows all the the custom report wit

...

shabeerc by L2 Linker
  • 4743 Views
  • 8 replies
  • 0 Likes

Captive Portal as an option

A few of my rules allow for certain individuals (by way of User-ID) access to download EXE and access most any application.  This of course works fine for PCs that are joined to the domain which makes up 99% of our PCs.  However, for that 1% that are

...

dshue by L2 Linker
  • 1923 Views
  • 2 replies
  • 0 Likes

Resolved! Clarification on File Blocking and SSL

If a download service uses SSL and PAN has an App and file blocking capability, but under SSL Decryption, it is an exception (ala drobpox), are options are pretty limited, correct?

VPN with fqdn denying ike 500

Hello,

I'm trying to setup a ipsec vpn with a fortigate which has dynamic ip as gateway.

I have a security policy which allows all packets from the dynamic ip (fqdn) but if i type the command 'show log traffic src in x.x.x.x' i can see that i have an i

...

cskodras by Not applicable
  • 2683 Views
  • 5 replies
  • 0 Likes

Classify ARD?

Remote Desktop Protocol (RDP) is a multi-channel protocol that allows a user to connect to a networked computer. Clients exist for most versions of Windows (including handheld versions), Linux/Unix, Mac OS X and other modern operating systems. The se

...

Resolved! Captive Portal Authentication

Hi, I've PA-500 with 4.1.1 and I've configured Captive Portal with AD Authentication. Pan-agenty seems to work fine and I can select the AD groups when I configure Securtiy Policy.

I've created an authentication profile only for Captive Portal with K

...

ssancho by L2 Linker
  • 4623 Views
  • 3 replies
  • 0 Likes

Installing a router behind PA-500 with Public IP

OK, I have read many discussions about this, but never found the answer.  We were provided a /28 range of IP addresses from our ISP.  We currently plug the ISP connection straight into port 3 on the PA.  I would now like to add a Juniper SRX behind t

...

bschaper by L2 Linker
  • 2698 Views
  • 4 replies
  • 0 Likes

Resolved! PANOS 4.0.8 - How to determine cause of DROP

Very basic configuration, an any any rule and a PAT rule for nat... trust and untrust zones and a default route and an internal summary route... what is happening is that from a traffic log perspective its being ALLOWED, from a NAT perspective I can

...

joshstout by Not applicable
  • 1838 Views
  • 1 replies
  • 0 Likes

Resolved! URL Categorization

Is there a way outside of making duplicate custom categories to re-categorize a site?  (Outside of requesting Brightcloud to change it).

If BrightCloud says a site is "Weapons" and I want it to be seen as "Government" how would I do so?

Thanks!

mrsold by Not applicable
  • 2040 Views
  • 1 replies
  • 0 Likes

Resolved! syncronize admin roles via panaroma to pa-500

Hi,

we are currently running PAN-OS 3.1.8 on our pa-500s and we are using PAN-OS 4.0.2 on our panaroma server.

Is there any way to create admin-roles on panorama and push them to the devices or must we create each role on any device separately.

Thanks f

...

Vwire with WCCP

Hi

I am planing put PAN Device on vwire mode  just before traffic reach their Proxy solution. Traffic redirect using WCCP web traffic from Cisoc switch to Cisco Ironport.The Proxy device only has one NIC interface.In this secenario What we will see?

...

shabeerc by L2 Linker
  • 2989 Views
  • 3 replies
  • 0 Likes

Inbound server failover between two ISP's

Hi All,

I have a PA-2050 setup with two IPS's.  One is primary, and if that goes down, the secondary takes over.  This has been tested and it works great.

There are three servers that recieve incoming traffic.  They have been setup to use the primary I

...

jgrabows by L0 Member
  • 1629 Views
  • 1 replies
  • 0 Likes

Global Protect Portals/Gateways HA sync

Hi,

I wonder if portals/gateways config are automatically synchronized in a HA environment or do the have to be created manually on each devce?

On our passive HA unit, there are no portals/gateways shown under global protect (only on the active unit).

t

...

  • 24016 Posts
  • 99 Subscriptions
Top Solution Authors