This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Gratuitous ARP / HA Problems

Hello!I was running some fail-over tests the other night and ran into some issues with my switch's ARP table updating correctly.I have attached a diagram that shows all of my PA connections into the switch stack.In a nutshell, I have a switch carved up into a number of different VLAN's, each having their own router interface and IP. I have appl...

cmaier by • L1 Bithead
  • 3598 Views
  • 1 replies
  • 0 Likes

Unable to allow only ICMP Echo Request; Firewall passes all the traffic

Hello,I have 2 networks in 2 different security zones. I have been trying to set up the firewall (PA-500) to allow only icmp echo request (ping), which is an icmp message number 8 and 0 between the two networks. When using predefined application called "ping" it allows other traffic and not just the icmp ping. I have also tried to create a custo...

dkraus by • L1 Bithead
  • 6614 Views
  • 4 replies
  • 0 Likes

BGP - PA2020 - utilization

I am looking to deploy a new router for switching from a single provider to a multihomed setup including some peering. I have PA-2020 for that purpose and wondering whether it will handle full BGP for a few years considering growth of routing tables ? Do you have any experience with BGP on PA-2020 ? How is processor load looks ?I have 20 Mbit of...

Group names showing full LDAP name

Prior to upgrading to v4.1, when adding an AD group to a policy, the group name used to show up as the shortened name "domain\groupname". While those policies still work post upgrading, whenever I now add a group name to a policy, the group shows up as "cn:groupname,ou:users,dc=domain,dc=local". While functional, not as cosmetic.Is it a config...

cenders by • L3 Networker
  • 3579 Views
  • 1 replies
  • 0 Likes

Performance issue on PA-5050 with profile active

I've ran into an interesting throughput issue with a PA-5050 in my lab, maybe someone can shed some light on this strange behaviour.The setup: PA-5050 running 4.0.7Two aggregated trunks: AE1 & AE2AE1 assigned to VSYS1 (Server VSYS)AE2 assigned to VSYS6 (Client VSYS)The test:FTP download test from a Windows2003 machine (with FileZilla) in VSY...

Nico by • L1 Bithead
  • 3438 Views
  • 3 replies
  • 0 Likes

Error When Adjusting Log Quotas

Anyone help on this? We can't alter the logdb quota settings (at least on the GUI) on Panorama - we get an error of "management is missing 'storage-partition' " even if we make a tiny change eg. reducing the size of the threat databse to 24% from 25%.I attempted to make the change from the CLI "set deviceconfig setting management disk-quota traf...

fmd by • L3 Networker
  • 5912 Views
  • 5 replies
  • 0 Likes

How to setup pan to inspect/monitor wireless traffic

I am currently running a PA-500 in IPS mode and is setup as a VWire behind my ASA. I have an environment that consist of a Cisco wireless controller and APs. How do I monitor my wireless traffic or better yet how do i setup policies for this? By the way I had a conversation with support this morning and it went no where.

FTP question

Greetings,I am trialing a WING FTP server here at the office. FTP and HTTPS work fine to the server from a FileZilla client. I have an SSL certificate loaded onto the server for FTPS/HTTPS. When I try to connect to the server via FTPS (port 990), the client connects but gets stuch at listing the directory contents. The FileZilla client hangs...

bright cloud - having problems

some of the sites are fasle postivie , and then we report to brightcloud and it takes 24 -48 housrs it. but some adult and pronograph sites can be opened , adult sites with diffrent languages like chinese , italian, russian , japanese , arab etc can be opened . some adult are linked are in social networking sites which cant be filtered.

jerry by • L1 Bithead
  • 3835 Views
  • 4 replies
  • 0 Likes

HIP for accessing DataCentre services

Hi All,Has anyone implemented a PAN solution using HIP policies for 'internal' LAN clients to access critical internal resources, such as in Data Centre deployments?Any issues to be aware of when looking at this sort of case usage?

KatanaNZ by • L3 Networker
  • 2696 Views
  • 1 replies
  • 0 Likes

dnsproxy policy?

HiWhat allow policy is needed for granting access to the dnsproxy? - when I try and only allow some things like, dns, web-browsing etc. the dnsproxy stops working - and nothing in the logsThanks

felixn by • Not applicable
  • 2987 Views
  • 1 replies
  • 0 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks