This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Log Exporting

I am exploring the best method for me to export and create reports based off of log data from a PA-4020, and have a few questions. Real-time reporting hasn't been determined just yet, but since I can essentially get real-time from the PA GUI I am thinking this will not be a requirement. That being said I think a 1/2 daily or 1/4 daily ftp expo...

UserID - possible to identify AD computer name

I have firmware version 4.1.1 and use the appropriate User-ID program for this firmware. I undretand how it all works for Active Directory user accounts, but what I want to know is can it be used to scan AD containers that only contain computer names, which I can then use in my security policies?I am trying to block certain apps for specific AD ...

Problem with Authentication Profile

I had to do some changes to the Allow List of a Authentication Profile based on LDAP (AD) but i'm constantly recieving "ajaxUserIdAgentUserHandler:: Error in retrieving data: Not Found"I'm sure that this was working previously. Additionaly I've manually edited the configuration and reuploded to the FW and the user is authenticated and can connec...

PanAgent AD Groups disappear

Hello all,We have a strange issue. Suddenly and without any cause the AD users in our PAN device losses the AD groups that they belong to. This is a huge problem cause the security policies configured by groups does not work.The strange thing is if we force a commit the problem gets temporally solved until in undefined time it happens again.The ...

Pan OS 4.1.2

I see they released version 4.1.2. Will there be a release for PAN-200 or is the PAN-500 version the same for the PAN-200.

snormoyle by • Not applicable
  • 2930 Views
  • 2 replies
  • 0 Likes

Log Fomrat

Hi all,is there any way to change the format of Palo Alto's logs?

nmarchal by • Not applicable
  • 2924 Views
  • 3 replies
  • 0 Likes

Dynamic Updates

I noticed under dynamic updates --> URL filtering that it shows version 3777 action upgrade. The action is set to "download-and-install". It shows the previous version 3776 as being the currently installed version. So what would be causing version 3777 to not be the currently installed version. I have runt the "check now" a few times with...

snormoyle by • Not applicable
  • 2168 Views
  • 1 replies
  • 0 Likes

Resolved! Make PA speak to AD without a User-ID Agent?

In order to use AD-integration in the PA unit (setup security rules based on logged in user or which group the logged in user belongs to) one need today to setup a few additional servers running the User-ID Agent (unless you want this agent to be running straight on your AD-servers).What would be nifty is if the PA unit could speak directly to t...

mikand by • L6 Presenter
  • 2743 Views
  • 1 replies
  • 0 Likes

Resolved! ICMP

When creating an application ID for the ICMP can you specifiy the codes, right now it just seems to cover only the types.Reason being is that due to security restrictions only certain types of ICMP traffic is allowed to cross one type of ICMP that needs to be allowed it type 3 code 4 which is for the packet fragmentation.

snormoyle by • Not applicable
  • 5063 Views
  • 3 replies
  • 0 Likes

Global Protect Agent as an EAP-TLS Supplicant

Hey All; For WI-FI Customers that want to perform EAP-TLS authentication is there any way we can use the global protect agent as a supplicant to a Wireless or Wired Access point? maybe taking their local credentials from Windows, then proxy the auth to a RADIUS server in the back-end through the firewall?

amansour by • L4 Transporter
  • 4623 Views
  • 3 replies
  • 0 Likes

Speed up Interface

Hi All;Is there a way to speed up the interface beyond the following:1) Using Chrome2) Opening up Tabs separatleySuch as:1) Disabling checks in the commit from the UI2) Will clearing logs/data etc to get faster response times

amansour by • L4 Transporter
  • 2519 Views
  • 2 replies
  • 0 Likes

Data Filtering Custom Report

Hello!In creating Data Filtering custom report, there is column named Repeat Count. What does that number mean? Is it number of how many times the file was downloaded? Or number of connections (or packets) in which that file was recognized?Is it possible to create a report (in 4.1 software version) in which will be displayed size of a file or am...

mkopcic by • L2 Linker
  • 3157 Views
  • 3 replies
  • 0 Likes

Intermittitent Communication Problem

I was wondering if anyone else has seen this issue or knows of the possible cause. The issue is, some traffic is not being passed through the paloalto in a vwire Active / Active configuration.For instance, 2 people on the same subnet, connected to the same switch, person A can ping the device through the PAN firewall, but Person B cannot. This i...

  • 24403 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks