This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

User ID Agent

Hello- I am running PAN OS version 3.1.7. I am running a User ID agent on an application server within the domain but I am not getting complete user ID information in my traffic/threat logs. We have just upgraded to Windows 2008 R2 64 bit domain controllers. Should I install and configure the User agent directly on the DC's for better result...

Resolved! User names not showing in logs, but do show when writing rules

I have a PA500 running version 4.0.5 and a PAN-agent running 3.1.2AD. I see the pan-agent working and connected to the PA-500 when I run the "show user pan-agent statistics" it says I have hundreds of users and all my groups and IP's in the output of that command. However, when I go to monitor the traffic log or any log for that matter, no user...

mnwvpn by • Not applicable
  • 4439 Views
  • 2 replies
  • 0 Likes

User-ID users not timing out

I only have a few users currently as this is a new deployment however the very few users I have do not seem to time out. I'm using the latest PAN agent on Win2008 R2.I have users still mapped who haven't been in the office for over 2 weeks. I have myself across about 6 IP's too. I also have mappings to users who are not here.My config is all de...

msnazel by • L0 Member
  • 2961 Views
  • 2 replies
  • 0 Likes

Application is Incomplete

In the monitor log, what does it mean when it shows Incomplete under the Application?I am blocking incoming RDP and everything works fine (Action = Deny) as long as it sees it as MS-RDP or T.120 but I am seeing some traffic shown as Action = Allow on port 3389 when Application = Incomplete.How would I block take traffic?

rbrogdon by • Not applicable
  • 10568 Views
  • 5 replies
  • 1 Likes

NAT Multiple external IP's to a single inside host

I'm trying to find documentation and/or any help to see if PAN firewalls are capable of NATing Two external IP's to a single host IP.My scenario:ISP1 204.23.123.123 ----------> Internal host 10.10.10.10ISP2 79.23.123.123I have tried searching documentation as well as contacting support and I have not received any...

Block doubleclick.net

Hello,I would like to block *.doubleclick.net because I am suspecting that it is the source of few spyware infections in our corporate network. Has anyone blocked this category of websites in the past? Is there a side effect if I block them (e.g. legitimate websites not loading etc).Kind regads,Andreas

Resolved! Panorama 4.0.5 Pushing Policy to 3.1.9

Confirmed with support that if Panorama is running 4.0.5 and a managed device is 3.1.9 policy will not Push to the remote device from Panorama. The workaround would be to downgrade Panorama to 4.0.4 which requires reboot and reindexing or upgrade remote device to 4.0.x As per the recent discussions of the data plan resets of the latter version...

opiedrah by • L0 Member
  • 2794 Views
  • 1 replies
  • 0 Likes

Resolved! SSL VPN and TLS support

The NetConnect user authentication page does not load completely when the client browser (IE 8, for example) has TLS 1.1 / 1.2 enabled. Instead of the Name and Password prompt, you get a popup window with an empty white frame.I read a couple recent release notes and did a search in the KB, but couldn't find any reference. Is this is known prob...

nwallette by • Not applicable
  • 3103 Views
  • 1 replies
  • 0 Likes

Is PBR similar or better than WCCP?

We're planning on implementing WCCP to route http and some streaming traffic to our proxy, but looking at how PBR work it's very similar. Can someone please give me a good comparison between the 2?thank you.

friento by • L3 Networker
  • 5877 Views
  • 2 replies
  • 0 Likes

Current session/connection information by subnet

HiWe're trying to isolate the source of some high session traffic in one of our regions. This is showing up in our exterior firewall connection count, and also on our PA device which is in line.I can see the sessions by using the command line tools and filtering to see which interface/zones/application they're from, but I can find no way of narr...

How is QoS applied

Hello,can somebody explain how QoS is applied on traffic through the PA.I know that I configure a QoS Profile, bind it to an interface and create a QoS policy,and that all belongs to the egress traffic of an interface.But what happens if I configure for example a profile with class 8 set to 1 Mbit max bandwidth.Are there buffers which are filled...

indevis by • L2 Linker
  • 4012 Views
  • 2 replies
  • 0 Likes

URL Filtering License Monitoring

I have a setup where I need to block traffic if our URL filtering license is not working as apposed to letting traffic go out with out the filtering. I want to monitor this license expiration some how. I don't want us to find out that our license has expired by end users calling us. I'm not seeing a way for the device to send email if the lic...

How to configure different Access Route in a SSL VPN?

My question is that I need to configure different Access Route for different user's profiles.For example:Group users 1 Access Route only to 192.168.0.0/16Group users 2 Access Route all packets, 0.0.0.0/0.It is possible with PA?Thanks,Félix Sánchez

How to configure Data Filtering Policy

I would like to know if there's a specific document that walks you through step-by-step of setting up data filtering. I am running PA2020 v3.05.I've read the Admin Guide v3.0, but it's very vague. There's no information as to what weight # should be used or regular expression samples. Thanks

hcao by • L1 Bithead
  • 10457 Views
  • 9 replies
  • 0 Likes
  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks