This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Vwire with WCCP

HiI am planing put PAN Device on vwire mode just before traffic reach their Proxy solution. Traffic redirect using WCCP web traffic from Cisoc switch to Cisco Ironport.The Proxy device only has one NIC interface.In this secenario What we will see? Only WCCP traffic, or Web traffic, from Switch to Proxy, and Web responses from Proxy to Switch, w...

shabeerc by • L2 Linker
  • 4143 Views
  • 3 replies
  • 0 Likes

Inbound server failover between two ISP's

Hi All,I have a PA-2050 setup with two IPS's. One is primary, and if that goes down, the secondary takes over. This has been tested and it works great.There are three servers that recieve incoming traffic. They have been setup to use the primary ISP IP addresses for access. All works fine there also.What I would like to do is to addtionally ...

jgrabows by • L0 Member
  • 2374 Views
  • 1 replies
  • 0 Likes

Global Protect Portals/Gateways HA sync

Hi,I wonder if portals/gateways config are automatically synchronized in a HA environment or do the have to be created manually on each devce?On our passive HA unit, there are no portals/gateways shown under global protect (only on the active unit).thx

PAN OS 4.1.1. How to delete user-group mapping

Hi, I'm using PAN OS 4.1.1 and I'm testing pan-agent and user-id agent. Actually I don't know how to delete my old user-group mappings. In CLI I type show user user-IDs and I see all the users, what I had with pan-agent and an old Active Directory and the new ones with User-IDs and new Active Directory.How could I delete the old ones??Thank you ...

ssancho by • L2 Linker
  • 3688 Views
  • 1 replies
  • 0 Likes

Traffic Between DCs after User Agent Install

I installed the PAN user agent on a customers core DC and we are now having some issues. The traffic between the DC with the user agent and the firewall is pretty minimal and everything is working correctly. However we are seeing a lot of additional traffic ( consistent 1Mbps+) between their core DC (where the agent is installed), and their edge...

Panorama

I have multiply firewalls but all the 3 firewalls holding different set of rules, in this case how panorama will help to manage centralzied.

dpgowe by • Not applicable
  • 2132 Views
  • 1 replies
  • 0 Likes

VPN peer with dynamic IP

Hello,I tried to make a VPN between a Palo Alto (static IP) and a Netscreen 5 (dynamic IP).I succeeded when I declared Netscreen's IP as static, so phase I and phase II, proxies and so are correct.When I change peer address to dynamic, VPN doesn't work. I tried declaring peer id, local id, every combination, but no success.I always get this log...

nevot by • Not applicable
  • 4760 Views
  • 3 replies
  • 0 Likes

Resolved! Regular Expression Fail

I keep getting the following error "is invalid. pattern must be at least 7 bytes"Example match: 378282246310005How I would normally match via regex: .*[3][47][0-9]{13}How I am interpreting Palo Alto wants me to write it: .*(3)[47].*([0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9])I have tried at least a dozen variations of rege...

rroberts by • Not applicable
  • 5506 Views
  • 4 replies
  • 0 Likes

Resolved! Custom App don´t appear in Custom Reports

Hi,I make some custom applications, those app works fine and appears in ACC and logs. But when I make new custom report and filter for application, no my custom app appear. Any idea?Regards

COMIP by • L2 Linker
  • 3699 Views
  • 3 replies
  • 0 Likes

Scheduled Log Export CSV File Size

I scheduled a log export and ended up with a ton of small (~30MB) CSV files on my ftp server. Is there any way to specify the size of each exported log file? I already tried setting the "Max Rows in CSV Export" (Device>Setup>Management) to the max value (1048576) but that did not appear to change the results of the scheduled log export jo...

PeteS by • L1 Bithead
  • 8863 Views
  • 9 replies
  • 0 Likes

Resolved! Interface 'configured but down' after delete

I started setting up an additional interface, decided it wasn't necessary and deleted it (it's configuration, anyway).After (more than one) commit action, it still shows up in red with the status 'configured but down'I'm not aware of any problems resulting from this--it's more of a distraction-- but I don't understand why this would be happening...

sspivey by • L1 Bithead
  • 10681 Views
  • 3 replies
  • 0 Likes

Resolved! Panorama NAS...

We are looking to add a new Vdisk to the Panorama and were wondering what others had experienced... We have already filled up the 10 GB default space.The document states that if the Vdisk is removed it will revert back to the internal 10GB.. What's the fail over/fault tolerence of the device? If the Vdisk looses connectivity will the Panorama...

kazjak by • Not applicable
  • 4534 Views
  • 5 replies
  • 0 Likes

Resolved! Denying Internet Connection Sharing

Hi, I've recently discovered that if a user shares their network connection by setting up an AP on their machine (think Mac 'Sharing') then whatever device is then connected can get online (the deny and allow policies still apply as expected). For example, a connecting iPad gets an address 10.0.0.3/32 from the workstation AP. The workstaion has ...

Conde01 by • L1 Bithead
  • 4246 Views
  • 3 replies
  • 0 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks