This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Create an App-ID for YouTube in the context of facebook

HI guys I am trying to create a custom App-ID to identify Youtube in the context of facebook, I would like to use this for a possible App QoS.Dependency is youtube from facebook but defining youtube app in the context http-host-header is too complex, so I was thinking of using youtube app as dependency and look for triggers as facebook referrer....

Importing Configuration from Fortinet

Hi,I'm experiencing a problem for importing configuration file from a cluster Fortinet 310B. After conversion, i try to load the file, and i recieve a message "File pan_conversion_l3.xml is malformed". I have tried to compare with the first configuration file fform the PA4020, I saw ther's no certificat on the top, but I'm not shure, if it's the...

Web Browsing

HiWe're about to install the web filter licence for the PA. Our current system is a proxy configuraiton via websense. Now that we're going to use the PA for web filtering is the best practise to create a security rule allowing all internal PCs direct access to the Internet using the common web based ports or is there some other way of making the...

djrodb by • L3 Networker
  • 2458 Views
  • 2 replies
  • 0 Likes

Resolved! Block page for vulnerability protection

I have been testing the security profile for vulnerability protection. I set the action for all critical threats to block. What should I expect to see on the user computer screen if a site does contain a critical threat recognized by Palo Alto? Should the user see a block page?

oshcomp by • Not applicable
  • 4853 Views
  • 3 replies
  • 0 Likes

MAC address filter and DHCP enforced...

Hi!Is it possible to create Policies based on MAC address instead of IP addresses?Also, can we enforce DHCP clients only mode? Meaning that the firewall only allows those who obtained IP's from the DHCP server. Seems like DD-WRT got the DHCP-Authoritative option:http://www.dd-wrt.com/phpBB2/viewtopic.php?p=650805thx!

gebis by • Not applicable
  • 9746 Views
  • 3 replies
  • 0 Likes

Resolved! ACC Not displaying drop-down boxes when filtering is applied

We have an issue where the drop-down boxes in the ACC disappear when filtering is applied.For instance, when I go into the ACC, I see all my data.1) I click on the web-browsing application to see the top users. The information displays properly.2) Then I click on a specific user to see that user's activity.I'd like to see a list of the top URLs ...

Captive Portal page to load when user-id is known?

Working on an idea to allow a manner of login/logout for users coming through captive portal auth.On a system that may or may not be identified on the back-end, I can load the captive portal page URL manually and set/change the user-id.When I try to load the page again, I only get a blank page - is there a URL I can load to generate a 'logout' o...

keklund by • L1 Bithead
  • 4027 Views
  • 3 replies
  • 0 Likes

How to transfer security policies created on the device on Panorama?

Hello,I'am planning to transfer security policies from the PAN FW to Panorama. First the policies was created on the device, but now we are planning to adopt a configuration model in witch we will only use Panorama to centrilize the management of policies and objects. So is there any methode to make the transfer easly (objects export, policies e...

asia by • L3 Networker
  • 3601 Views
  • 3 replies
  • 0 Likes

PA-500 LDAP Checkin Timing

Does anyone know how often a PA-500 checks in with LDAP to determine group members? I was adding users to a group that should be blocked from outside access, however, even after 10 minutes and several restarts the user can still get right out to the internet. How long does it take for the Palo Alto to check back for group members?On that same ...

kaysun by • L1 Bithead
  • 2108 Views
  • 1 replies
  • 0 Likes

PBF for YouTube Redirect to external proxy?

Since URL-Rewrite is still not an option in PanOS (I think only recently they announced that it may be on the roadmap), I've been investigating ways to redirect YouTube traffic to an external proxy server that supports rewrite. I need to do this to implement the new Youtube for Schools service.Wondering if this is a workable scenario:- Setup an...

keklund by • L1 Bithead
  • 9420 Views
  • 4 replies
  • 0 Likes

snmp oid

I am workig with oidview, and trying to find an entry for vpn tunnels.show vpn tunnelshow vpn gatewayshow counter interface (tunnel.x)is there any oid's to cover these command line items?

erantanen by • Not applicable
  • 3482 Views
  • 3 replies
  • 0 Likes

PA 5050 Upgrade to 4.1.X

Today I upgraded my PA 5050 to 4.1.0 and it was sucessfull. But when I tried to upgade from 4.1.0 to 4.1.3.or 4.1.4 i got an error message that the file will not upload as the file is invalid.Any idea why it is giving such error.Thanks

itsecll by • L1 Bithead
  • 4779 Views
  • 7 replies
  • 0 Likes

Email Server profile configuration

Is a local email server, such as Exchange, required to schedule email reports? I've tried to set up the sever profile and send test messages to a web email server with no success. If a web email server can be used what will the server profile configuration look like?

twhite by • L1 Bithead
  • 2875 Views
  • 1 replies
  • 0 Likes

Does NetConnect support WinXP 64 bit?

I see https://live.paloaltonetworks.com/docs/DOC-1409. There is no information that NetConnect can support Windows XP 64 bit. I currenty use PA-2050 with PANOS 4.0.5, NetConnect 1.3.2. What should I do next step? Thank you in advance.

MISCO by • Not applicable
  • 1986 Views
  • 1 replies
  • 0 Likes

Resolved! Would PANOS support TGC's IF-MAP protocol?

Hi,Testing some Automation environments, we would like to use IF-MAP protocol in order to set an scenario where setting a new Virtual Machine (ESX) will trigger an automatic network devices configuration task to allow traffic and security. This include firewalling.So far I've read that switching / routing is covered for most vendors, but I'm mi...

  • 24403 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks