This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

PA-2050 have problem performance CPU dataplane. (80 -95% all time)

PA-2050 have problem performance CPU dataplane. (80 -95% all time)Deploy paloalto 4 zones (inside, outside, DMZ, Server)Enable IPS, Antivirus, Antispywarefirmware version 4.0.7Throughput avearage 200 - 250 MbpsConnection 20000 - 30000 sessionTesting disable layer 7 application with create Application overide policy between inside and Server zone...

Resolved! Is there a way to add multiple (many) IP addresses to a security policy at once?

I am trying to adjust a security rule that I have in place that blocks incoming traffic from multiple IP hosts.In the rule I currently have approx 100 IP host explicitly blocked (spammers)I am trying to add another group that I have taken from my mail server (approx 150)Is there a way I can modify and add all of those addresses at once instead o...

JW-LGH by • L0 Member
  • 7250 Views
  • 2 replies
  • 0 Likes

is it possible to apply user-id at SBC environment?

I had a test related to User-ID with PNA Agent for AD. This environment has a little unusual and It is called a SBC (Server Based Computing). I tried to apply User-ID with PAN Agent for AD but it was not working as my intention. Clients must access remote desktop to run application throughout SBC. Clearly, clients have a domain login to access...

willstech by • L3 Networker
  • 4590 Views
  • 8 replies
  • 0 Likes

"Application is already in use" commiting custom application addition

Hello,I am trying to import a few custom applications via XML files I downloaded from my PaloAlto vendor. I did try this before with some that I found here in this forum when running PAN 3.1. I am now on PAN 4.1 (though I may have seen this problem before I updated). Now when I import the XML most of them say they failed to insert, but when I...

gsvarney by • L1 Bithead
  • 12936 Views
  • 3 replies
  • 0 Likes

Traffic with no data (???) is denied

Hello,I have a PA 2050 device that is configured to allow specified traffic (multiple rules) and one rule that deny all other traffic (at the bottom).When looking at the "Deny all" rule, I can see a lot of packets that should be allowed by specific rules above that are denied with no data (see screenshot bellow). Is it normal ? And what does it ...

ldormond by • L3 Networker
  • 4408 Views
  • 3 replies
  • 0 Likes

No Rule Groups ?

Juniper/Checkpoint and other Vendors allow you to create rule groups. Basically headers to organize functional rules/policies together. I think this goes a long way to keeping you policy organized. There's no way to do this ?Thanks,Justin

jhickey by • L3 Networker
  • 2232 Views
  • 1 replies
  • 0 Likes

Resolved! Passive FTP issue after upgrade to v4.1.0 (NAT issue?)

After upgrading to version 4.1.0 on my PA2050 in HA (Active-passive) passive FTP is no longer possible to our FTP server.When users logon they timeout on the MLSD command (in binary mode) I'm looking at NAT because the issue does not arise when accessing the same server from within the network. The FTP server is in the DMZ and doesn't NAT for in...

question of the way of configuration for Authenticating Administrator Using IAS for PAN device.

I’d like to apply AD Authenticating Administrator Using IAS for PAN device.And i also installed IAS on the Active-Directory Server. I tried to apply it follow link below, but I’ve been failed.https://live.paloaltonetworks.com/docs/DOC-1196As additional information, PAN is 4.0.7 and Window version is server 2003. Please let me know if someone who...

willstech by • L3 Networker
  • 1804 Views
  • 1 replies
  • 0 Likes

migrate local objects to Panorama shared objects

Hello, I have 3 PA-500 that are running as stand alone devices. I've purchased Panorama as I am planning to add more devices. Currently my 3 PA-500 have about 150 objects that I would like to import to Panorama as shared objects so I can make 1 change that will replicate everywhere. What is the best way to:Copy/clone local PA-500 objects to Pano...

essnet by • L4 Transporter
  • 7070 Views
  • 6 replies
  • 0 Likes

Email notification - server requires authentication

Is it possible to establish an email server under [ device -> server profiles -> email ] with authentication parameters? Our email servers require auth but I don't see a way of configuring this. Otherwise, does anyone have alternative ideas?I'm running PAN OS 3.1.10, 4.0.7, and 4.1.1Of note - I'm trying to configure the email server so I...

Resolved! PAN OS 4.0.4 - Rule hit counts?

Hi,please let me know, if there is a way which can enable me to see the number of hit counts for a particular rule in PAN OS 4.0.4. If i know the rule hit count, i can optimize the rule database of our PA-500.Best regardsHeiko

  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks