General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4121 Views
  • 0 replies
  • 0 Likes

how to format of SSD.

For the replacement test,I had set the spare SSD in the PA-5000,and some logs was written on SSD.Could you tell me how to format of SSD?

smaekawa by Not applicable
  • 4817 Views
  • 5 replies
  • 0 Likes

Reporting

Hello, New to the forums and Palo Alto, and I have a simple question. How do I pull a report for all websites a user has visited? Seems straight forward enough, but a user activity report is extremely lacking and to be perfectly honest I am not sure I am reporting all the traffic from a user. Some users are showing a few websites wh...

Resolved! How do I monitor how much of the IPS cpu is being consumed?

I have a PA-4060 and am monitoring via a TAP port my Internet connection and want to see how much traffic is being sent to the IPS engine hardware. I need to know this because I know the IPS functionally is 1/2 of the rated throughput of the firewall functionallity.I know about the following commands but I don't think this gives me what I want:...

User-ID doubt

I have some problems with user identification and I'm very confused about how it works.In the case that we use User-ID agent with AD. Is it the following process correct?1.A user makes a logon in PC-A , with his domain credentials.2.An event is created in Security log (ID 4768/4769/4770) "LOGON USER-A -> PC-A"3.User-ID agent check the securit...

teamviewer download

I tried to download temaviewer (TeamViewer_Setup_it.exe) but the firewall pa500 blocked me like viruses Trojan/Win32.agent.ckovs what should I do?

Molteni by L0 Member
  • 2182 Views
  • 1 replies
  • 0 Likes

Resolved! Support on PA for UNIX-Syle tracerouts

Does PA support unix-style tracerouts. I have enabled ICMP and PING, but tracerouts from unix hosts through palo alto are still being denied. Looking at this a little bit further, we noticed that windows-style tracerouts use ICPMP echo requests and rely on ICMP destination unreachables ,messages, but unix-style tracerouts send UDP packets with h...

bbivolaku by Not applicable
  • 4505 Views
  • 3 replies
  • 0 Likes

Securing SSH

Is it possible to secure SSH with a public/private key or some other means. I have noticed an extremely high number of logon attempts, and want to block these as much as possible. I am sure I can lock it down to certain source IP addresses, but I would prefer to not go that route as we have roaming IT staff that use a variety of connection met...

Resolved! Virtual Systems with Different PAN-OS versions

Hi All,I heard that its possible to have a vsys with a different PAN-OS that the others, to do such things as test the PAN-OS upgrade out with rules, etc before applying it across the board to all.What I can't see in the appliance UI, is how to do this, if its in fact possible.Can anyone confirm, or deny, this can actually be done, and if so how.

KatanaNZ by L3 Networker
  • 2794 Views
  • 1 replies
  • 0 Likes

Admin roles and Vsys

Hi All,I'm trying to create a role based user, that is specific to a vsys. when creating a user when logged in as the superuser,I can't create a user, and select the RoleBased profile that is based on a vsys, as the ok button grey's out.Is there a step that i'm missing here?

KatanaNZ by L3 Networker
  • 2537 Views
  • 1 replies
  • 0 Likes

NTLM security credentials warning over VPN

Hi,We have a couple of Linux Samba servers that can only talk NTLM 0.12 dialect(this is from packet captures).If I am connecting to a Linux Samba share from the internal LAN my Win 7 client(that supports up to SMB 2.0) negotiates down to NTLM 0.12 and connects using cached credentials.If I am connecting to a Linux Samba share from client VPN, th...

Cannot download a file on php.net

Hi,I have an issue wen my co-worker try to download a file from php.net.I cannot find wich progam is called in my policies rules.The file is available at : http(s)://pecl.php.net/get/oci8-1.4.6.tgz and cannot download it.Thank you and sorry for my bad englishM.B

ffgolf by L0 Member
  • 2857 Views
  • 3 replies
  • 0 Likes

Native VLAN configuration

I have configured a couple of layer-3 subinterfaces on a aggregate, they are tagged as VLAN 700 and VLAN 800, in my cisco switch I have configured a trunk port that permits VLAN 700 and VLAN 800 to pass traffic across it. When plugged in, everything comes up just fine and I'm able to ping both interfaces etc etc.As soon as I add a native vlan ...

bjaming by Not applicable
  • 10298 Views
  • 7 replies
  • 0 Likes
  • 24336 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels