This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

New PA Purchase - Rules question and any tips?

Recently purchased a PA2020 to replace our Cisco PIX 525. I'm in the process of auditing our cisco config and recreating it in the PA.I'm looking for suggestions on how to allow applications inside to outside and outside to inside.I only have two zones setup. inside-trust & outside-untrustCan I just create one rule to allow skype that list...

How do I use the query feature of the CLI show log traffic command?

I'm trying to perform a complex log export operation from the command line, as the web GUI seems to be drastically underpowered and slow to respond (hours to see, longer to export in CSV), and from the command line I can't perform queries using terms to extract data in a date range, or figure out how to do that.Ideally, I'd love to execure the q...

jsilvia by • Not applicable
  • 16667 Views
  • 5 replies
  • 0 Likes

SSL VPN users unable to access the internet though Palo

Hi I have setup SSL VPN and its been in use for a few weeks without any issue with the exception of one minor annoyance.I have been unable to get the SSL VPN users to be able to see the internet when connected. 1) The access route is set to 0.0.0.0/0 to force all traffic back though the Palo Alto. I don’t want users getting internet...

IPS functionality testing

We are looking to do a live demo of PAN devices to some leads . Does anybody have tool we can use to demonstrate the IPS functionality in real time .Putting the box through a wide range of attacks . App ID is pretty easy but Checkpoint now does application visibility . I have heard about metaploit . I havent seen a windows version u could easil...

usvi by • L3 Networker
  • 3070 Views
  • 1 replies
  • 0 Likes

Resolved! Commit Failed (HA active-passive)

Hi, Commit on customer PA500 Cluster running in Active-Passive mode on PANOS 3.1.6Details device: Client device registered in the middle of a commit. Aborting current commit.Commit failedsystem log:Receive Time Type Severity Object Event Description10/26 13:54:20 general high general Commit job fa...

Resolved! Block Outbound SSTP (Secure Socket Tunneling Protocol)

Is there a timeline when the ability to block SSTP outbound will become available or is it possible now?Microsoft's latest and greatest is surely a hole that it would seem most don't want in their environment.Any insight would be greatly appreciated... thus far it seems that only TMG (Threat Management Gateway) can block SSTP short of blocking a...

micit by • L1 Bithead
  • 4437 Views
  • 3 replies
  • 0 Likes

Resolved! User-ID Agent for Active Directory won't transfer mappings

Hello-I have a new PA500 (running 4.0.4) that I've set up and am now trying to tie to Active Directory in order to create user-based policies. I have everything configured to my knowledge, but I'm not getting any user-IP mappings on the firewall.I installed what I believe to be the latest AD agent, 3.1.2 (filename PanAgent-3.1.2.msi), on my se...

Resolved! Data Filtering by Name

In "monitor" --> "Data Filter" is there a way to filter by name? The name shows things like zip and rar and filtering by this automatically would be very useful. Or is this available in a feature-set beyond 4.0.1?Also, the release notes for 4.0.5 link appears broken, or otherwise unavailable. Is this going to be available again sometime i...

SSLVPN/Netconnect Command Line

Hello,Is there a way to interact with the SSLVPN/Netconnect application via command line arguments? Can you script any portion of the launch of Netconnect?Thanks,-Paul

PANOS 4.0.6

Hi - I can see PANOS 4.0.6 in the software section on my Panorama. I can't see it as available when I go onto my PA 4050s though - it's still showing 4.0.5 as the latest available code to download. On the support website - it's mirrored again in the Software Updates section - 4.0.5 is available for Panorama but not listed for the devices yet. Am...

fmd by • L3 Networker
  • 2670 Views
  • 2 replies
  • 0 Likes

vsys id too big on panorama

I have a PAN 5050 connected to Panorama and when I try to sync panorama shared policies for the device group of this vsys it gives me the error "vsys id too big". All the other vsys synced no problem, the only thing I can see is that the vsys id is 26, though they have licensing for 125 vsys. vsys id too bigCommit failedAny ideas?

Upgrade Path from 3.1.7

Hello,I am currently running PAN OS 3.1.7 on my 4050 corporate cluster. Can I upgrade from 3.1.7 to 4.0.1? Should I upgrade to a later version of the 4.0 code? I know there is a known issue with 4.0.5 but what about 4.0.4? Is it a stable code? Thanks!Darcy

Resolved! Why does the PAN Route through the management interface?

If I traceroute with the source ip of my private internal interface to the host that my user-id app is located it works.If I just do a traceroute host to the host that my user-id is located on it fails.I put a static host route in the VR pointing out my private internal interface and it still fails if I don't source the interface in the trace.

Problems with installing SSL-VPN Client

HiHas anyone else had any problems with Installing PanInstaller on Windows 7?I have managed to install it on some machines but sometimes the installation just drops and in the event viewer I get:EventId 7030Source Service Control ManagerPanInstaller is marked as an interactive service. However, the system is configured to not allow interactive s...

lindorff by • Not applicable
  • 9455 Views
  • 12 replies
  • 0 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks