This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Aggregate interface state and routing

Two locationsTwo pairs of 5050sHave a configuration wtih two sets of aggregate portsOne set of VLANs that are local/native to the location the PAN assigned to the first set of aggregate ports - these are intended to be up at all times.The other set of VLANs are assigned to the other data center but are stretched across the WAN backhaul to the ot...

jcostello by • L4 Transporter
  • 5499 Views
  • 3 replies
  • 0 Likes

Scheduled reports cannot have a period value of last-30-days

I'm having fits trying to get meaningful reports out of the firewalls or Panorama. Recently I came across this"Scheduled reports cannot have a period value of last-30-days or last-calendar-month"My question is... Why ? I need to produce monthly reports. Is there any way around this ? I'm assuming storage is the issue ? Any SQL long term storage ...

jhickey by • L3 Networker
  • 4779 Views
  • 7 replies
  • 0 Likes

How to define differents objects names for same FQDN object ?

Hello,I want to define multiple object name for the same FQDN object. The idea is to have relevent object name for different policies.For example, I define 2 address objects for FQND myserver.mycompany.com : H_srv_oracle and H_srv_ntp.Then I define 2 security policies : one with H_srv_oracle for oracle traffic, the other with H_srv_ntp for NTP t...

ldormond by • L3 Networker
  • 2271 Views
  • 1 replies
  • 0 Likes

About Network World NGFW Test

Hi all,reading the test report I noticed just a couple of things for which I'm totally agree (unfortunately). Are things that should be a MUST to really compete with the other important vendors.1. "File blocking lets you identify certain file types that can then be blocked for either upload or download or both. We found that the file blocking wa...

Resolved! Vwire A/P mode in V3 & V4

HiI know the Vwire interface of standby box (A/P mode ) in PAN OS V3 is down . How about PAN OS V4 ? is same ?Where Can I get related infos in V4ThanksJeff

JeffJin by • L2 Linker
  • 2464 Views
  • 2 replies
  • 0 Likes

XMP API in Excel for reports

Hi All,Has anyone used the xml api in MS Excel 2010, to create traffic reports, pulling data from Panorama, and matchingUser-ID names to LDAP UID tags?I need to split traffic reports for divisions, based on cost center codes that will be LDAP, or AD objects, as user are not split into containers.

KatanaNZ by • L3 Networker
  • 2027 Views
  • 1 replies
  • 0 Likes

SSL-VPN using PPPoE PANOS 4.1

Hello,I am trying to enable SSL-VPN with a PPPoE interface but I can not see the SSL Portal.I have configured on the pppoe interface the static IP address and check the box of add default route. I have configured the SSL-VPN with a tunnel interface and output interface ethernet-pppoe and with his static ip address. Also I opened the https servi...

SMS Install Problem

When I push the Netconnect client and installer using SMS to a target XP SP3 PC, I get application errors in the windows event log. The PC will have the NetConnect shortcut on the desktop. When I launch it, it tries to do an install instead of running the app.log errors:Event Type: WarningEvent Source: MsiInstallerEvent Category: NoneEvent ID: 1...

kime by • L0 Member
  • 2126 Views
  • 1 replies
  • 0 Likes

Resolved! 3.1.7 to 4.1.0

The upgrade procedure for 4.1.0 says I must be running 4.0.0 or later. Does it matter which version of 4.0.0 I install? Which route is prefered...a) 3.1.7 > 4.0.1 > 4.1.0b) 3.1.7 > 4.0.7 > 4.1.0Thanks

jambulo by • L4 Transporter
  • 3401 Views
  • 3 replies
  • 0 Likes

Resolved! Traffic flow when QoS max hit

Hi All,What happens to the traffic flow, when a QoS maximum is hit?Do the packets being to be dropped, or are they backed up, either in an internal Queue ( and if so, what is the size of that queue ),or are they rate limited so the client/proxy sending the traffic queues itself?

KatanaNZ by • L3 Networker
  • 3638 Views
  • 3 replies
  • 0 Likes

Resolved! how many fans in PA5000

HiI am not sure how many fans in PA5000 or how many fans in one fan tray BTW , if one pA box only have oneThanksJeff

JeffJin by • L2 Linker
  • 2299 Views
  • 1 replies
  • 0 Likes

GlobalProtect Client VPN

Now that we have client VPN functionality via global protect is there any way to force clients to use a proxy over the VPN conneciton?ThanksRod

djrodb by • L3 Networker
  • 3373 Views
  • 3 replies
  • 0 Likes

VSYS and Commit

Hello,I had a consultant who states that you can commit only the VSYS you modify and not commit the rest of the configuration. I have looked at some documentation and see no refernce to this.My question is this: Is this a fact? If yes where can I find the information to understand the type of configuration required. I see this as a possible ...

block flash

HiWhen I "deny" application "flash" - flash is not blocked, do I have it all wrong or?Thanks

felixn by • Not applicable
  • 8224 Views
  • 16 replies
  • 0 Likes

"ignore-unknown-response" is remained setting. (OS3.1 to 4.0)

HiI did upgrade to PAN-OS 4.0.but, "ignore-unknown-response" is remained.Can't commit.The following error occurs."deviceconfig -> setting -> panagent unexpected here."I Load "running-configuration.xml","ignore-unknown-response" was deleted.I can commit.Is this "ignore-unknown-response" a PAN-OS 4.0 design? or bug?Thanks.Regards, Shunpei ...

smaekawa by • Not applicable
  • 1986 Views
  • 1 replies
  • 0 Likes
  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks