General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4227 Views
  • 0 replies
  • 0 Likes

Force safe search (Google, Yahoo, Bing) for a specific URL category (with Brightcloud subscription) & time based access to URL categories

I've searched the dev forums for the safe search options, etc and found a lot of solutions. These rules don't scale well across different groups (LDAP groups). Is there a better way?Also, allow for specific URL categories based on time (i.e. allow Webmail during lunch and before and after work, but allow other categories during the blocked time)...

edenney by L0 Member
  • 3343 Views
  • 1 replies
  • 0 Likes

Resolved! Aggregate interface state and routing

Two locationsTwo pairs of 5050sHave a configuration wtih two sets of aggregate portsOne set of VLANs that are local/native to the location the PAN assigned to the first set of aggregate ports - these are intended to be up at all times.The other set of VLANs are assigned to the other data center but are stretched across the WAN backhaul to the ot...

jcostello by L4 Transporter
  • 5308 Views
  • 3 replies
  • 0 Likes

Scheduled reports cannot have a period value of last-30-days

I'm having fits trying to get meaningful reports out of the firewalls or Panorama. Recently I came across this"Scheduled reports cannot have a period value of last-30-days or last-calendar-month"My question is... Why ? I need to produce monthly reports. Is there any way around this ? I'm assuming storage is the issue ? Any SQL long term storage ...

jhickey by L3 Networker
  • 4491 Views
  • 7 replies
  • 0 Likes

How to define differents objects names for same FQDN object ?

Hello,I want to define multiple object name for the same FQDN object. The idea is to have relevent object name for different policies.For example, I define 2 address objects for FQND myserver.mycompany.com : H_srv_oracle and H_srv_ntp.Then I define 2 security policies : one with H_srv_oracle for oracle traffic, the other with H_srv_ntp for NTP t...

ldormond by L3 Networker
  • 2171 Views
  • 1 replies
  • 0 Likes

About Network World NGFW Test

Hi all,reading the test report I noticed just a couple of things for which I'm totally agree (unfortunately). Are things that should be a MUST to really compete with the other important vendors.1. "File blocking lets you identify certain file types that can then be blocked for either upload or download or both. We found that the file blocking wa...

Resolved! Vwire A/P mode in V3 & V4

HiI know the Vwire interface of standby box (A/P mode ) in PAN OS V3 is down . How about PAN OS V4 ? is same ?Where Can I get related infos in V4ThanksJeff

JeffJin by L2 Linker
  • 2370 Views
  • 2 replies
  • 0 Likes

XMP API in Excel for reports

Hi All,Has anyone used the xml api in MS Excel 2010, to create traffic reports, pulling data from Panorama, and matchingUser-ID names to LDAP UID tags?I need to split traffic reports for divisions, based on cost center codes that will be LDAP, or AD objects, as user are not split into containers.

KatanaNZ by L3 Networker
  • 1959 Views
  • 1 replies
  • 0 Likes

SSL-VPN using PPPoE PANOS 4.1

Hello,I am trying to enable SSL-VPN with a PPPoE interface but I can not see the SSL Portal.I have configured on the pppoe interface the static IP address and check the box of add default route. I have configured the SSL-VPN with a tunnel interface and output interface ethernet-pppoe and with his static ip address. Also I opened the https servi...

SMS Install Problem

When I push the Netconnect client and installer using SMS to a target XP SP3 PC, I get application errors in the windows event log. The PC will have the NetConnect shortcut on the desktop. When I launch it, it tries to do an install instead of running the app.log errors:Event Type: WarningEvent Source: MsiInstallerEvent Category: NoneEvent ID: 1...

kime by L0 Member
  • 2018 Views
  • 1 replies
  • 0 Likes

Resolved! 3.1.7 to 4.1.0

The upgrade procedure for 4.1.0 says I must be running 4.0.0 or later. Does it matter which version of 4.0.0 I install? Which route is prefered...a) 3.1.7 > 4.0.1 > 4.1.0b) 3.1.7 > 4.0.7 > 4.1.0Thanks

jambulo by L4 Transporter
  • 3272 Views
  • 3 replies
  • 0 Likes

Resolved! Traffic flow when QoS max hit

Hi All,What happens to the traffic flow, when a QoS maximum is hit?Do the packets being to be dropped, or are they backed up, either in an internal Queue ( and if so, what is the size of that queue ),or are they rate limited so the client/proxy sending the traffic queues itself?

KatanaNZ by L3 Networker
  • 3496 Views
  • 3 replies
  • 0 Likes

Resolved! how many fans in PA5000

HiI am not sure how many fans in PA5000 or how many fans in one fan tray BTW , if one pA box only have oneThanksJeff

JeffJin by L2 Linker
  • 2214 Views
  • 1 replies
  • 0 Likes

GlobalProtect Client VPN

Now that we have client VPN functionality via global protect is there any way to force clients to use a proxy over the VPN conneciton?ThanksRod

djrodb by L3 Networker
  • 3249 Views
  • 3 replies
  • 0 Likes

VSYS and Commit

Hello,I had a consultant who states that you can commit only the VSYS you modify and not commit the rest of the configuration. I have looked at some documentation and see no refernce to this.My question is this: Is this a fact? If yes where can I find the information to understand the type of configuration required. I see this as a possible ...

block flash

HiWhen I "deny" application "flash" - flash is not blocked, do I have it all wrong or?Thanks

felixn by Not applicable
  • 7782 Views
  • 16 replies
  • 0 Likes
  • 24355 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels