General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 268 Views
  • 0 replies
  • 1 Likes

Injecting a default route into OSPF

I have an OSPF virtual router configuration with two interfaces. One interface (int1)  is part of the default area (0.0.0.0) whereas the other  one (int2)  is not. There is a static default which points to the next hop on the non-OSPF interface netwo

...

quist by Not applicable
  • 10130 Views
  • 2 replies
  • 0 Likes

IKE pre-shared key: is there any forbidden character?

Hi Everybody,

when configuring an IPSec VPN between our PAN appliance and both Cisco and CheckPoint devices, we had problems with using a long pre-shared key, which included special characters too (e.g. more than 30 letters, both small and lower case,

...

Bucche by L2 Linker
  • 5773 Views
  • 2 replies
  • 0 Likes

Resolved! Upload page for tech support

I am really suprised that the SSL cert for the web page used to upload tech support files doesn't have a trusted cert.  Is that by design, because uploading my firewall config to an untrusted SSL site makes me feel a little weird...  Especially when

...

PDFs and MS-updates

Hi PAN Experts,

Has anybody faced problem of MS-updates and PDFs not able to go through a PAN in vwire mode ? policy is allow all in either direction. Version is 4 0 2.

BR

Problem with IPSec and GRE

Hello

I have a bg problem

The need is to create such a configuration: external IPSec tunnel and next GRE tunnel inside the previous one. IPSec tunnel must be created between my PA device and external gateway. GRE tunnel mus be created between my cisco

...

Revoked Certificate treating as Valid, is it a bug?

I have set up Client Certification Profile, and use in SSL VPN. I tried to revoke a cert. Firefox already able to valid that cert is invalid but PaloAlto still allow that certificate, I was able to verify from my OSCP server that PaloAlto had a succe

...

muratahk by Not applicable
  • 4055 Views
  • 4 replies
  • 0 Likes

Resolved! Mobile Devices (Apple & Android)

Our school district has started purchasing mobile devices, the iPad2's and some Xooms.

I've noticed in the Monitor logs that they don’t always fall until the default rule?  So far two have been using the Admin rule which opens all but Adult content. 

...

Resolved! Application Choice in Security Policy

All,

I am setting up a security policy that will allow inbound ssl traffic only to a secured web server.  The NAT rule is already created but I have a question about the application choices for the security rule.  If I just list ssl as the application

...

tohoken by Not applicable
  • 1801 Views
  • 1 replies
  • 0 Likes

Palo Alto Site Survey

Hello

for my job, i will need to do a site for the installation of Palo Alto Firewalls (not still decided if it will be a cluster or not)

Do soemone has some experience for that? What does i need to consider? Power supply, rack space, connectivity?

Than

...

mmichel by Not applicable
  • 1598 Views
  • 1 replies
  • 0 Likes

Howto filter javascript in mail-data?

It seems to be not possible to write a custom signature, which filters out javascript in mails.

The challenge is to avoid something like that:

#> telnet server 25

helo willi

mail from:<otto@lbsost.de>
rcpt to:<m.huels@lbswast.de>
data
From: Mannis Emailchec

...

mhuels by L3 Networker
  • 2376 Views
  • 3 replies
  • 0 Likes

Drive By Downloads

We turned on block/continue protection for .exe and PE files yesterday, but we're having issues with some sites not showing the page at all and sometimes the window is so small and not resizeable.

This happens in both IE9 and Firefox 3.6.

I was trying

...

  • 23632 Posts
  • 107 Subscriptions
Top Liked Authors
Labels