General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 266 Views
  • 0 replies
  • 1 Likes

Resolved! Device-level configuration and "pre-staging" in Panorama?

Is there a way to pre-stage device level configurations within Panorama?  I would like to build a virtual systems, virtual routers, security policy, etc. on a "dummy" object in Panorama, and then push these changes to a real firewall when I bring it

...

mgentile by L2 Linker
  • 2185 Views
  • 1 replies
  • 0 Likes

Error trying to unlock an admin

Under Authentication Profiles on Panorama 3.1.8 I noticed one of my admins is apparently locked. When I try to unlock by clicking on the link I get the error:

vsys unexpected here locked-users unexpected here authentication unexpected here show unexpe

...

KGC by L3 Networker
  • 2407 Views
  • 1 replies
  • 0 Likes

SNMP OID for monitoring temperature

Does anyone know what the OIDs are for monitoring temperatures and other environmental conditions in the different PAN devices?  The reference documents do not include this information.

HTTPS browsing

I made a quite shocking discovery about PA and how it inspects SSL encrypted traffic.

Please correct me if I'm wrong.

1. To allow simple HTTPS web browsing traffic it isn't enough to allow "web-browsing" application in the policy, you must to allow "

...

SimasK by Not applicable
  • 7677 Views
  • 9 replies
  • 0 Likes

Resolved! TCP Timeouts

If you work with firewalls long enough you will undoubtably run into this issue. I have a webserver in the DMZ that needs to talk to the database server on the inside. The connections need to be nailed up. In otherwords, I dont want the firewalls to

...

jickfoo by Not applicable
  • 11512 Views
  • 8 replies
  • 0 Likes

Manually Remove PanAgent/NetConnect

Hello All,

Seem I was bitten by the Java security update and a Win7 64bit OS during the installation of SSL-VPN NetConnect and PanAgent service. My computer will now no longer successfully connect to the PanAgent service and NetConnect hangs on establ

...

admin override an URL and set a cookie

Hello world,

when using the "admin override" function, I thought that PA is seting a session cookie for the browser.

Unfortunatly, it looks like, the PA is just storing the source IP.

When using a proxy, all connections of the overriden page are from th

...

botnet question

Hello team.

on the firmware 4.0.1, we have botnet monitoring function.

my question is to utilize the botnet feature, do I need to buy the URL filtering license and update it to up-to-date?

thank you

BH Lee

bhlee by Not applicable
  • 2467 Views
  • 2 replies
  • 0 Likes

firmware 4.0.1 SFP warning message

Hello team.

on the firmware 3.X, when I put the unsupported SFP to PA, it show warning message..

but on the firmware 4.0.1, I don't see that warning message..

"Non-qualified SFP detected on port %d: vendor '%s'; part '%s'"

it means.. we're starting to su

...

bhlee by Not applicable
  • 2231 Views
  • 2 replies
  • 0 Likes

SQL Database Protection?

Is there any functionality within IPS/IDS or data filtering or anything in the Palo Alto that can go a little further than IPS/IDS which looks for "bad things" and that does some sort of verification/validation of SQL traffic?

The sort of thing that s

...

Threat ID 33803 MHTML vulnerability

New to Palo Alto. Just got an alert for threat ID 33803, Microsoft Windows MHTML Protocol Handle Cross Domain Scripting Vulnerability. I looked at the packet capture, and all I see is a href specifying an mhtml URL. Is the PaloAlto signature just mat

...

cscott by Not applicable
  • 1728 Views
  • 1 replies
  • 0 Likes

3.1.8 vs 4.0.1

So now that 3.1.8 is out after 4.0.1, does it mean that the issues 3.1.8 addresses from the 3.1.7 release are still present in the 4.0.1 release? Or are these completely separate branches with their very own "issues"?

KGC by L3 Networker
  • 2804 Views
  • 3 replies
  • 0 Likes

Threat ID 250175 Trojan-clicker/Js.Agent.baxdn

I can't find any information about this virus. Google search turns up nothing. With nothing to go on, I'm not sure how to respond to this threat. I'm reluctant to track down the machine and dive into analyzing it without having more information about

...

cscott by Not applicable
  • 1794 Views
  • 1 replies
  • 0 Likes
  • 23631 Posts
  • 107 Subscriptions
Top Liked Authors
Labels