General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

is it possible to apply user-id at SBC environment?

I had a test related to User-ID with PNA Agent for AD. This environment has a little unusual and It is called a SBC (Server Based Computing). I tried to apply User-ID with PAN Agent for AD but it was not working as my intention. Clients must access remote desktop to run application throughout SBC. Clearly, clients have a domain login to access...

willstech by L3 Networker
  • 4592 Views
  • 8 replies
  • 0 Likes

"Application is already in use" commiting custom application addition

Hello,I am trying to import a few custom applications via XML files I downloaded from my PaloAlto vendor. I did try this before with some that I found here in this forum when running PAN 3.1. I am now on PAN 4.1 (though I may have seen this problem before I updated). Now when I import the XML most of them say they failed to insert, but when I...

gsvarney by L1 Bithead
  • 12937 Views
  • 3 replies
  • 0 Likes

Traffic with no data (???) is denied

Hello,I have a PA 2050 device that is configured to allow specified traffic (multiple rules) and one rule that deny all other traffic (at the bottom).When looking at the "Deny all" rule, I can see a lot of packets that should be allowed by specific rules above that are denied with no data (see screenshot bellow). Is it normal ? And what does it ...

ldormond by L3 Networker
  • 4409 Views
  • 3 replies
  • 0 Likes

No Rule Groups ?

Juniper/Checkpoint and other Vendors allow you to create rule groups. Basically headers to organize functional rules/policies together. I think this goes a long way to keeping you policy organized. There's no way to do this ?Thanks,Justin

jhickey by L3 Networker
  • 2232 Views
  • 1 replies
  • 0 Likes

Resolved! Passive FTP issue after upgrade to v4.1.0 (NAT issue?)

After upgrading to version 4.1.0 on my PA2050 in HA (Active-passive) passive FTP is no longer possible to our FTP server.When users logon they timeout on the MLSD command (in binary mode) I'm looking at NAT because the issue does not arise when accessing the same server from within the network. The FTP server is in the DMZ and doesn't NAT for in...

question of the way of configuration for Authenticating Administrator Using IAS for PAN device.

I’d like to apply AD Authenticating Administrator Using IAS for PAN device.And i also installed IAS on the Active-Directory Server. I tried to apply it follow link below, but I’ve been failed.https://live.paloaltonetworks.com/docs/DOC-1196As additional information, PAN is 4.0.7 and Window version is server 2003. Please let me know if someone who...

willstech by L3 Networker
  • 1804 Views
  • 1 replies
  • 0 Likes

migrate local objects to Panorama shared objects

Hello, I have 3 PA-500 that are running as stand alone devices. I've purchased Panorama as I am planning to add more devices. Currently my 3 PA-500 have about 150 objects that I would like to import to Panorama as shared objects so I can make 1 change that will replicate everywhere. What is the best way to:Copy/clone local PA-500 objects to Pano...

essnet by L4 Transporter
  • 7070 Views
  • 6 replies
  • 0 Likes

Email notification - server requires authentication

Is it possible to establish an email server under [ device -> server profiles -> email ] with authentication parameters? Our email servers require auth but I don't see a way of configuring this. Otherwise, does anyone have alternative ideas?I'm running PAN OS 3.1.10, 4.0.7, and 4.1.1Of note - I'm trying to configure the email server so I...

Resolved! PAN OS 4.0.4 - Rule hit counts?

Hi,please let me know, if there is a way which can enable me to see the number of hit counts for a particular rule in PAN OS 4.0.4. If i know the rule hit count, i can optimize the rule database of our PA-500.Best regardsHeiko

Resolved! syntax of the syslog messages

Hello everybody,does anyone know if it is possible to personalize syslog messages sent by a Firewall :smileyconfused:Kind regards,Ouassil

ext22 by Not applicable
  • 3130 Views
  • 2 replies
  • 0 Likes

Resolved! Static IP for SSL VPN

I got to thinking about this the today.Is there anyway to assign a static IP address in the SSL VPN? I'd like to assign one to myself so I can remote in and check on the firewall when I needed to do so.

mharding by L4 Transporter
  • 6388 Views
  • 6 replies
  • 0 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
Labels