This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

VSYS and Commit

Hello,I had a consultant who states that you can commit only the VSYS you modify and not commit the rest of the configuration. I have looked at some documentation and see no refernce to this.My question is this: Is this a fact? If yes where can I find the information to understand the type of configuration required. I see this as a possible ...

block flash

HiWhen I "deny" application "flash" - flash is not blocked, do I have it all wrong or?Thanks

felixn by • Not applicable
  • 7997 Views
  • 16 replies
  • 0 Likes

"ignore-unknown-response" is remained setting. (OS3.1 to 4.0)

HiI did upgrade to PAN-OS 4.0.but, "ignore-unknown-response" is remained.Can't commit.The following error occurs."deviceconfig -> setting -> panagent unexpected here."I Load "running-configuration.xml","ignore-unknown-response" was deleted.I can commit.Is this "ignore-unknown-response" a PAN-OS 4.0 design? or bug?Thanks.Regards, Shunpei ...

smaekawa by • Not applicable
  • 1955 Views
  • 1 replies
  • 0 Likes

User-ID Event Generation

I have a question about the events used to map users to IP's in the firewall.According to documentation, the PA uses three event ID's to map users to IPs: 4768, 4769, 4770.The question I have is this:If a user (say his username is bsmith) is an IT administrator, and also has a username of bsmithadmin with administrative rights (he may use this a...

bbrassart by • Not applicable
  • 3079 Views
  • 1 replies
  • 0 Likes

Resolved! IPv6 NA RA

I'm running the PA-500 in a fully dual stacked mode yet I also want to run a Vlan as pure IPv6. When or is it now possible with 4.1 to have the PA perform ND RA?I've been waiting for this feature for some time now!

msnazel by • L0 Member
  • 3629 Views
  • 4 replies
  • 0 Likes

Any issues with PANOS 4.0.5?

Has anyone ran into issues with PANOS 4.05?My previous past experience with PANOS 4.0.x was not the greatest.High CPU utilization, network latency, GUI issues, and logging issues were notthe greatest. The end result was tech support and rollback to PANOS 3.1.x.

bchan by • L0 Member
  • 16454 Views
  • 28 replies
  • 0 Likes

Resolved! Blacklist threat attackers?

In addition to dropping packets of an attacker (say the RDP Brute Force which I get a lot of), is it possible to auto-blacklist the attacker IP address after a certain number of attempts? It would then block all traffic from that source?

cenders by • L3 Networker
  • 4345 Views
  • 4 replies
  • 0 Likes

Multiple policies that use URL allow lists?

I have a query regarding multiple rules to allow access to URL whitelists. Let’s say I have rule1 that allows “any” on my LAN to a URL profile that blocks everything but only allows access to url1.com. I then want to have rule2 that only allows “some servers” access to only url2.com. The problem is that the URL filtering profile on the first rul...

How to log all url ?

Hello,In the monitor tab, the traffic log doesn't allow to see url destination. As far as I know, the only place where to see url destination is URL Filtering logs.However, only the url that are part of the URL Filtering objects are logged.My question is : How to make the system log all url ? (as there was an additionnal "url" column in the traf...

ldormond by • L3 Networker
  • 4438 Views
  • 4 replies
  • 0 Likes

Authentication for generic user account

Hi,A client have a several computers with a generic user that logon automaticaly. Actually, with a ISA Server configured as explicit user, the browser prompts user/pass data to access to Internet. What can I do with PaloAlto to make the same? Captive portal is not a solution because all the computers are configured with DHCP option, and I can't ...

COMIP by • L2 Linker
  • 2801 Views
  • 3 replies
  • 0 Likes

Resolved! file blocking continue page issue

Hi,I am using PANOS 4.0.3, and have created a file blocking profile object with action = continue , this should then prompt the user while downloading and on clicking continue, the user should be able to go to download the exe, etc...The issue i am having is that on clicking continue, the browser tries to display the file i am downloading, rathe...

Global Protect Client with OTP

Can the GPC be configured to prompt me for the password when attempting to connect?I'm using RSA tokens but I having real trouble trying to get GPC to work properly with out a fixed password.I'm not sure how I managed it but at one point I did get a password prompt but when entering the password it wasn't masked!!As a systems integrater this nee...

PThomas by • Not applicable
  • 3109 Views
  • 1 replies
  • 0 Likes

4.1.0 release - should I wait?

How stable? How tested? Is this mostly incremental changes on the inside? The mentioned improvements to the management performance have me very interested, but when I went from 3.x -> 4.0 we had nothing but problems due to a few bugs.I'm now upgrade-wary.

bradenmcg by • L3 Networker
  • 2322 Views
  • 1 replies
  • 0 Likes

Resolved! GlobalProtect and iPad Configuration

Now that PAN OS 4.1 supports IOS devices connecting to a GlobalConnect gateway is there any change the nice people at Palo Alto will put up some documentation on how to get this configured?Many thanksRod

djrodb by • L3 Networker
  • 4640 Views
  • 6 replies
  • 0 Likes

download pending when need download 'the Generate stats dump'

I want to download the Report stat Dump in GUI . But seems always waitting long....... time - ( pending the download UI , no successfull ) . I guess maybe log file is full need more time to Generate ..( I am using V4.0.5 ) . Is it normal behavior.?. pls advise other way the the dump file .Thanks

JeffJin by • L2 Linker
  • 2721 Views
  • 2 replies
  • 0 Likes
  • 24401 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks