This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Not detecting Lotus notes traffic correctly

Hi All,I have a system, running 4.0.5 ( about to be .6 ) in TAP mode at a PoC site.They run Lotus notes, with one server platform, but two different types of clients.We are getting a lot of unknown-TCP, which is actually going to the notes server, and on the notes port, so likely to be notes.Any reason why it wouldn't actually be detected as such?

KatanaNZ by • L3 Networker
  • 2389 Views
  • 1 replies
  • 0 Likes

Is it possible to use public IPs on the same subnet on different interfaces?

Hello,We want to use inbound NAT in different VSYS on a PAN 4020 device. The question is, is it possible to use adresses(mip equivalent on netscreen devices) from the same subnet on different phisycal interfaces in different vsys? On netscreen devices we must split adresses in different subnets and make routing on network routers behind the fire...

asia by • L3 Networker
  • 7988 Views
  • 5 replies
  • 0 Likes

Resolved! passthrough page without authentication

Hi all, I have a 2050 pair and I'm trying to find a way to prensent my users with a page with 'terms of use' that they would accept and continue on to a list of websites that I can control. I don't want to authenticate the users, just give them a splash page and let them go through, is this possible? Thanks in advance.

Resolved! SSL-VPN on iOS 5 Device

I have an iPad running iOS 5 and was wondering the same thing as everybody else. Is there an App yet to do this? If not, has anybody else found a work around yet. I, like all of us here, would love the idea of being able to VPN with a tablet.

unaranjo by • Not applicable
  • 2800 Views
  • 1 replies
  • 0 Likes

how to format of SSD.

For the replacement test,I had set the spare SSD in the PA-5000,and some logs was written on SSD.Could you tell me how to format of SSD?

smaekawa by • Not applicable
  • 5013 Views
  • 5 replies
  • 0 Likes

Reporting

Hello, New to the forums and Palo Alto, and I have a simple question. How do I pull a report for all websites a user has visited? Seems straight forward enough, but a user activity report is extremely lacking and to be perfectly honest I am not sure I am reporting all the traffic from a user. Some users are showing a few websites wh...

Resolved! How do I monitor how much of the IPS cpu is being consumed?

I have a PA-4060 and am monitoring via a TAP port my Internet connection and want to see how much traffic is being sent to the IPS engine hardware. I need to know this because I know the IPS functionally is 1/2 of the rated throughput of the firewall functionallity.I know about the following commands but I don't think this gives me what I want:...

User-ID doubt

I have some problems with user identification and I'm very confused about how it works.In the case that we use User-ID agent with AD. Is it the following process correct?1.A user makes a logon in PC-A , with his domain credentials.2.An event is created in Security log (ID 4768/4769/4770) "LOGON USER-A -> PC-A"3.User-ID agent check the securit...

teamviewer download

I tried to download temaviewer (TeamViewer_Setup_it.exe) but the firewall pa500 blocked me like viruses Trojan/Win32.agent.ckovs what should I do?

Molteni by • L0 Member
  • 2250 Views
  • 1 replies
  • 0 Likes

Resolved! Support on PA for UNIX-Syle tracerouts

Does PA support unix-style tracerouts. I have enabled ICMP and PING, but tracerouts from unix hosts through palo alto are still being denied. Looking at this a little bit further, we noticed that windows-style tracerouts use ICPMP echo requests and rely on ICMP destination unreachables ,messages, but unix-style tracerouts send UDP packets with h...

bbivolaku by • Not applicable
  • 4661 Views
  • 3 replies
  • 0 Likes

Securing SSH

Is it possible to secure SSH with a public/private key or some other means. I have noticed an extremely high number of logon attempts, and want to block these as much as possible. I am sure I can lock it down to certain source IP addresses, but I would prefer to not go that route as we have roaming IT staff that use a variety of connection met...

Resolved! Virtual Systems with Different PAN-OS versions

Hi All,I heard that its possible to have a vsys with a different PAN-OS that the others, to do such things as test the PAN-OS upgrade out with rules, etc before applying it across the board to all.What I can't see in the appliance UI, is how to do this, if its in fact possible.Can anyone confirm, or deny, this can actually be done, and if so how.

KatanaNZ by • L3 Networker
  • 2903 Views
  • 1 replies
  • 0 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks