This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Upgrading Panorama and firewalls from 3.1.8 to 4.1.3

Looking to upgrade our Panorama and mix of 500, 2000 and 4000 HA units from 3.1.8 to 4.1.3.We understand that we need to jump to 4.0 first, and then to 4.1.3 as there is no direct upgrade path.Here are some of the questions however:Can we upgrade Panorama 3.1.8 -> 4.0 -> 4.1.3, and then do the same to the firewalls at a later time? What's ...

KGC by • L3 Networker
  • 4351 Views
  • 3 replies
  • 0 Likes

User-ID: Radius

Our students that use our wireless must authenticate to Cisco ACS using their domain credentials before gaining access to the network. How can I setup my User-ID agents to properly log the student wireless name and ip? Will this need to be a change on the domain controller, acs, or the pan-agent?Thanks for any advice!

u10723 by • Not applicable
  • 3234 Views
  • 1 replies
  • 0 Likes

User-ID PanOS 4.1

In regard to user identification of traffic, older implementations of PAN we would install the PAN-Agent, but after reading a bit more on the 4.1 it seems I would no longer need to use the agent in an Active Directory installation. Is there any documentation on how to do this for multiple DCs in multiple domains? We are in the midst of a domain...

u10723 by • Not applicable
  • 5512 Views
  • 6 replies
  • 0 Likes

Increase Data plane CPU on PA-500

Hi, every body!I used Palo Alto - 500 with version 4.0.1On this device, Data plane CPU alway about 6-20%. I want to increase Data plane CPU on Pa-500 (4.0.1)Please help me How to increase CPU up to 70-90% ???Thanks all !!!

thenlee by • Not applicable
  • 3115 Views
  • 3 replies
  • 0 Likes

Resolved! How does dns-proxy in Vsys Configuration works?

I'm trying to use different dns server for FQDN objects in each vsys.My platform is PA5020 v4.0.9., and I can see dns-proxy field in vsys creation window.According to the explanation in '?' help page, it says something about interface.Which interface does it point?What is the difference between interface in dns-proxy config window and this?If so...

emr_1 by • L6 Presenter
  • 5207 Views
  • 2 replies
  • 0 Likes

Resolved! Rogue/Fake Antivirus Malware detection?

I was wondering if there is any way to detect the Rogue/Fake Antivirus Malware that is making its way around the internet?A couple in paticular are Internet Security 2010, Antivirus Live and Advanced Virus Remover.Thanks,D

PA 500, Hairpin routing and front ending certs

I am trying to implement a Exchange 2010 setup and the consultant is asking if the PA can handle HairPin routng and if it can front end the certs for the Exchange systems. I haven't a clue and google results were less than clear, so am turning to the forums and hopeing someone else does. Anyone?

u7483 by • Not applicable
  • 3047 Views
  • 1 replies
  • 0 Likes

create an application to replace a service

I'm converting a Check Point firewall to PAN. they have multiple rules where ping and other user-defined services are participating. Can I create an app with the port of those services so I can have all in one rule? Do you see any problem wit that?

How to add already configured FW to Panorama

I must be missing a step because I am able to add a FW that has no policies or virtual systems to Panorama, but when I try to add a FW that is already configured with rules and multiple virtual systems, Panorama just says "shared policy status" "Out of Sync" and will not say it is connected. Is there a trick to get Panorama to allow me to add a...

Help required to convert Cisco ASA NAT rule onto Palo Alto

Hi Guys,I am not expert in reading or understanding the Cisco ASA NAT rules and I have just started to feel comfortable with Palo Alto except for NAT rules. Can someone please guide me through on how to go around configuring the following Cisco ASA NAT rule onto the Palo Alto?I have just taken a couple of rules to convert. Based on this, I wou...

Resolved! user-id 4.1.3-2, pan os 4.1.3, no user mappings

hello and hope someone can help,i am brand new to PAN(not to FWs or networking) and I've been trying to get this to work for a week now with no results?i have attached some pics of the user id agent gui and logs.i have read and followed the instructions found in the following docs:" user-id agent initial installation and setup version 4.1","us...

jj by • Not applicable
  • 17743 Views
  • 8 replies
  • 1 Likes

how to configure PAN to work as proxy

Hi ThereWe have this problem after implementing PA-2020, we are facing the slow ness of our internal web site, before we were using ISA 2006 proxy where we can add exception in the Policy Management put now we could not implement proxy in pan and we remove the ISA according to PAN recommendation

almaskri by • Not applicable
  • 2490 Views
  • 1 replies
  • 0 Likes

IE8 and captive portal

Users are getting "can not display web page" in IE and "connection reset" message when using firefox when opening the browser up and captive portal is attempting to redirect them to the authentication page or the "block-continue" page. Has anyone noticed or seen this happen? I notice it only when the WMI polling fails to correctly identifty the ...

jasbeck by • Not applicable
  • 11089 Views
  • 12 replies
  • 0 Likes

Resolved! Dynamic URL Filtering when policy matching on URL

Hi,We're using dynamic URL filtering (ie the "cloud" database") within our URL-filtering profiles. Within PAN-OS 4.1 there is now the option to match on URL category within security policies, but no checkbox there to use the Dynamic Filtering. So, if I try and access a URL thats not in the local database, does the firewall still go and query t...

UserID Exclude Not Working

Hi,I have a problem where the 'User ID Exclude List' setting within the Zone setup on a Palo is not working.I have set my UserID agents to collect events from all IP addresses, then want to filter them on the PA itself as this seems the most logical sequence. I initially only added the objects to the 'Include' list that I wanted to collect ID's...

apackard by • L4 Transporter
  • 3071 Views
  • 3 replies
  • 0 Likes
  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks