This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

User Identification not working for Decrypted SSL Traffic / Data Filtering

Hey Guys,I recently implemented a SSL Decryption Rule to decrypt SSL traffic between my users and a particular destination so I can apply a Data Filtering Rule to it.Everything appears to be working except that it seems like the User Identification piece is not working..User Identification appears to be working for everything else except my decr...

ikinnexi by • Not applicable
  • 4108 Views
  • 4 replies
  • 0 Likes

Global Protect Datafile Version mismatch

Im working thru the process to roll out the Global Protect VPN software to our laptop users - I have three PA boxes, a 2050 and two 2020s - all are running 4.1.3, all have GP gateway licences & client 1.1.4 installed although we only have one portal licence for the 2050 (and so only one portal configured).I have the portal setup & publis...

SimmSimm by • L2 Linker
  • 3504 Views
  • 2 replies
  • 0 Likes

Problem User-ID Server Connection List in eDirectory

Hi All,I have a problem on the server connections list in the edirectory on server AD (file attach), for device connection there is no issu. but when i see any connection to the server user-id list to 192.168.203.9 (AD) <-> connecting (Server Down). in the settings I created did nothing wrong (file attach).Rgds,Didit

PAN and iPrism integration problems in vwire

Trying to insert a PAN in vwire mode between the existing external firewall and the existing iPrism web filter using vwire. When the iPrism web filter is removed and the PAN is between the external firewall and the core switch, traffic is passing fine thru the PAN. But when the iPrism is placed back between the PAN and the core switch no traffic...

One day in production with 4.1.3

Alright, this is basically a rant..I installed a PA-500 at a site this last weekend, replacing a Cisco ASA 5520. We are using this site as our test bed for the 4.1 codebase before rolling it out company-wide. To be honest, I'm in no hurry to move from 3.1, but we ran into a problem where 3.1.10 would not properly translate H.323 traffic throug...

nwallette by • Not applicable
  • 8673 Views
  • 11 replies
  • 0 Likes

Allowing Mac mail client to send/receive

I have users/board members that come on campus and need to get mail through applications like the built in mail client on a Mac or from a FirstClass mail server. In this instance the ports they need to communicate with are 995 and 510 respectively. We have a rule allowing all outbound traffic but I can't seem to get configured correctly for them...

jpzynski by • Not applicable
  • 2898 Views
  • 1 replies
  • 0 Likes

Applying security policies with security profile groups

Typically, are these applied on the inbound direction or outbound direction of an interface?And if you wanted to protect an entire zone/interface would you just apply it to any source and any destination?For example if you wanted to apply Antivirus to a interface dedicated to your Wifi access devices?Thanks

dkhoe by • L1 Bithead
  • 2194 Views
  • 1 replies
  • 0 Likes

Resolved! What DROPS User -> IP Mappings

Hi,For no apparent reason my AD account is not generating reliable User->IP mappings via the UserID agent - after working fine for weeks.As part of my investigations into this I can see that my User->IP map is being generated, appearing on the UserID agent list and being listed on the Palo Alto itself; then it will just disappear from both...

apackard by • L4 Transporter
  • 3803 Views
  • 2 replies
  • 0 Likes

Global Protect

Hi all,im tryng various option to disable the global protect client on my macbook.The vpn client works fine, but if i select the disable option with ticket, or with pass code, and try to disconnect from the client it's disconnect without challange or request password. I've also specified to doesn't display the advenced tab and i see the option i...

fcellini by • Not applicable
  • 17220 Views
  • 16 replies
  • 0 Likes

WMI max allowed entries?

I've seeing the following error in our user id agent logs (3.1 agent).2012 03 21 11:13:33, Number of pending entries(4540) exceeds max. allowed(1000)Anyone know about this max limit? Can it be modified? Do failed polls just accumulate indefinetely? Will extending polling windows alleviate this or adding additional user id agents?1000 seems sort ...

jasbeck by • Not applicable
  • 4512 Views
  • 2 replies
  • 0 Likes

Proper Reporting

Is there a white paper that goes into detail of what all can be done with reporting? I need to see a bandwidth to website ratio. Like facbook traffic accounted for 30% of bandwidth usage today. I would love to have some sort of a reference guide that has more detail and explains a bit more than the Admin Guide. Also can i view the PDF Summa...

u10723 by • Not applicable
  • 3004 Views
  • 2 replies
  • 0 Likes

Resolved! Question of SSL VPN in HA active active.

Hello there. i have some questions regarding of SSL VPN in active active HA. 1. If I have configure Active-Active HA with PA500, is it possible to support 120 concurrent user at Active-Active HA? (limitation of SSL VPN concurrent user from PA500: 100 concurrent users.)2. If it is support 120 concurrent users is it possible to traffic load an...

willstech by • L3 Networker
  • 3215 Views
  • 2 replies
  • 0 Likes
  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks