This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Quality of Brightcloud URL categorisation or lack of.

HelloHas anyone else found that there are a large number of websites being classified as Job Search when they are blatantly not? We are finding this to be the case and in fact are generally finding the classifications to be a bit hit and miss in places. Our previous URL filtering solution used the Smartfilter database and we never really had any...

robert.b by • L1 Bithead
  • 16322 Views
  • 21 replies
  • 0 Likes

Global Protect - ondemand

After installing the GlobalProtect client software on a Windows 7 Home laptop, even when the client is not being used, every so often a message will pop up with "on demand" will connect on its own and it will not time-out. The only way to stop it is to kill the process in the task manager. The disconnect is greyed out and it will not allow me t...

User Identification not working for Decrypted SSL Traffic / Data Filtering

Hey Guys,I recently implemented a SSL Decryption Rule to decrypt SSL traffic between my users and a particular destination so I can apply a Data Filtering Rule to it.Everything appears to be working except that it seems like the User Identification piece is not working..User Identification appears to be working for everything else except my decr...

ikinnexi by • Not applicable
  • 4086 Views
  • 4 replies
  • 0 Likes

Global Protect Datafile Version mismatch

Im working thru the process to roll out the Global Protect VPN software to our laptop users - I have three PA boxes, a 2050 and two 2020s - all are running 4.1.3, all have GP gateway licences & client 1.1.4 installed although we only have one portal licence for the 2050 (and so only one portal configured).I have the portal setup & publis...

SimmSimm by • L2 Linker
  • 3479 Views
  • 2 replies
  • 0 Likes

Problem User-ID Server Connection List in eDirectory

Hi All,I have a problem on the server connections list in the edirectory on server AD (file attach), for device connection there is no issu. but when i see any connection to the server user-id list to 192.168.203.9 (AD) <-> connecting (Server Down). in the settings I created did nothing wrong (file attach).Rgds,Didit

PAN and iPrism integration problems in vwire

Trying to insert a PAN in vwire mode between the existing external firewall and the existing iPrism web filter using vwire. When the iPrism web filter is removed and the PAN is between the external firewall and the core switch, traffic is passing fine thru the PAN. But when the iPrism is placed back between the PAN and the core switch no traffic...

One day in production with 4.1.3

Alright, this is basically a rant..I installed a PA-500 at a site this last weekend, replacing a Cisco ASA 5520. We are using this site as our test bed for the 4.1 codebase before rolling it out company-wide. To be honest, I'm in no hurry to move from 3.1, but we ran into a problem where 3.1.10 would not properly translate H.323 traffic throug...

nwallette by • Not applicable
  • 8634 Views
  • 11 replies
  • 0 Likes

Allowing Mac mail client to send/receive

I have users/board members that come on campus and need to get mail through applications like the built in mail client on a Mac or from a FirstClass mail server. In this instance the ports they need to communicate with are 995 and 510 respectively. We have a rule allowing all outbound traffic but I can't seem to get configured correctly for them...

jpzynski by • Not applicable
  • 2886 Views
  • 1 replies
  • 0 Likes

Applying security policies with security profile groups

Typically, are these applied on the inbound direction or outbound direction of an interface?And if you wanted to protect an entire zone/interface would you just apply it to any source and any destination?For example if you wanted to apply Antivirus to a interface dedicated to your Wifi access devices?Thanks

dkhoe by • L1 Bithead
  • 2183 Views
  • 1 replies
  • 0 Likes

Resolved! What DROPS User -> IP Mappings

Hi,For no apparent reason my AD account is not generating reliable User->IP mappings via the UserID agent - after working fine for weeks.As part of my investigations into this I can see that my User->IP map is being generated, appearing on the UserID agent list and being listed on the Palo Alto itself; then it will just disappear from both...

apackard by • L4 Transporter
  • 3778 Views
  • 2 replies
  • 0 Likes

Global Protect

Hi all,im tryng various option to disable the global protect client on my macbook.The vpn client works fine, but if i select the disable option with ticket, or with pass code, and try to disconnect from the client it's disconnect without challange or request password. I've also specified to doesn't display the advenced tab and i see the option i...

fcellini by • Not applicable
  • 17032 Views
  • 16 replies
  • 0 Likes

WMI max allowed entries?

I've seeing the following error in our user id agent logs (3.1 agent).2012 03 21 11:13:33, Number of pending entries(4540) exceeds max. allowed(1000)Anyone know about this max limit? Can it be modified? Do failed polls just accumulate indefinetely? Will extending polling windows alleviate this or adding additional user id agents?1000 seems sort ...

jasbeck by • Not applicable
  • 4491 Views
  • 2 replies
  • 0 Likes
  • 24404 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks