This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Why permitiing web-brosing is required while permitting custom http-based apps?

Hello,I was testing custom http based apps, and in this context i created a custom app based on a signature in the host field of the http header. The problem is that it function properly only if i permit the app web-brosing in the same rule. By logging at the begining and at the end of the session i noticed that whene session starts, the traffic...

asia by • L3 Networker
  • 8191 Views
  • 12 replies
  • 1 Likes

Vasco Token authentication

How can I integrade Vasco (Radius) Authentication into the Firewall?On my old Firewall i use telnet to identify my users with Radius so I can define special Firewall Rules.With UserID there no Option to use Radius right?

gste by • Not applicable
  • 3183 Views
  • 1 replies
  • 0 Likes

if panorama occurred network loss of network connection?

hello there. I'd like to know what happen, if network disconnected between panorama and PAN mgmt network. if panorama network has a disconnect with problem of NIC, PAN device won't send logs to panorama.but i'd like to send logs without loss of logs from PAN device to panorama even though panorama network disconnected at that time.How can PNA de...

willstech by • L3 Networker
  • 2901 Views
  • 2 replies
  • 0 Likes

Resolved! question of FQDN based security policy and country ip db update cycle

Hello there.I have couple of question below.1. add new security policy based on FQDN i have two DNS records on the same machine and same IP address like below. 1. groupware. aaa.com (IP: 192.168.1.10, tcp port 6363) 2. www.aaa.com (IP: 192.168.1.10, tcp port 80) Customer wants to add a security policy by FQDN for blocking for g...

willstech by • L3 Networker
  • 2753 Views
  • 1 replies
  • 0 Likes

200 Box

Does the 200 box have 2 different processors like the 500 (one for the control plane, one for the data plane)?

4.1 - How big of a jump from 4.0?

We're currently running 3.1.10. There is an issue we're encountering related to SSL decryption and URL filtering which we're waiting for 4.0.8 to come out and fix.I see 4.1 is now out so just when I thought we'd be running the latest PanOS, all of a sudden we aren't.How much of a leap is 4.1 from 4.0.x? What is Palo Alto's recommended OS assum...

My SMTP rule allows a lot of other traffic

Hello,I have a specific rule that only allows SMTP application.When looking at the traffic logs related to this rule, I see a huge amount of other packets !Most of them are "incomplete", but I also have a lots of applications like dns, oracle, RPC and unknown-tcp.I heard that setting service to "application-default" could resolve thus kind of is...

ldormond by • L3 Networker
  • 5123 Views
  • 4 replies
  • 0 Likes

Resolved! authentication question for device login.

Hello there i have two questions and the question are 2-factor auth and AD users for device login. . 1. firest question is related to 2 factor auth. i heard that it is possible to apply 2-factor authentication with OTP for PAN device login. Does other authentication systems also available for 2-factor authentication? for example RADIOUS, ...

willstech by • L3 Networker
  • 2532 Views
  • 1 replies
  • 0 Likes

Resolved! does GP apply for client by force?

Hello support.I have some questions link to Global Protect feature.Does GP meet the requirement below? 1. GP clients can't disconnect global protection SSL-VPN during stay out of office. 2. GP clients can't kill GP connection (SSL-VPN) by force during stay out of office.Thanks,Eugene.

willstech by • L3 Networker
  • 2278 Views
  • 1 replies
  • 0 Likes

PanOS 4.1.0 Interface view

Hi we've updated our boxes, to 4.1.0.The problem is, that the interface view is unsorted. Maybe this can be changed in an setting somewhere.Anyone else had this problem and a solution for this?Thx

muellerm by • Not applicable
  • 6516 Views
  • 8 replies
  • 0 Likes

HA Active/Active - Failover issues

Hello,I have tried to setup an Active/Active cluster, based on the "PAN-OS Active/Active High Availability - Configuring active/active clusters" technote. I am pretty sure that I have understood and followed the guide correctly.However, regardless of the Session Owner, Session Setup and Virtual Address settings, the cluster did not seem to failo...

darkfibre by • Not applicable
  • 8408 Views
  • 5 replies
  • 0 Likes
  • 24419 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks