General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4117 Views
  • 0 replies
  • 0 Likes

Resolved! no-decrypt list?

I am looking for a list of sites that are known not to work with SSL decryption but have been unable to find anything. I would like to see a KB article published or a do-decrypt forum so users can post what they find. Citrix published IP addresses for GotoMeetingBlock 1 216.115.208.0-216.115.223.255Block 2 216.219.112.0-216.219.127.255Block 3 6...

ksupport by L0 Member
  • 3286 Views
  • 1 replies
  • 0 Likes

Panorama 4.0.4: storing PANOS images on Panorama-Deployment-Software

Hello, Everybody,we would like to download all the image files of the different PanOS versions we are using, in order to have a local copy of such files.We have downloaded and stored 5 image files with no problem, but when we try the sixth image, it is downloaded, but then we find out that one of the previously stored files has been deleted...Do...

Bucche by L2 Linker
  • 4735 Views
  • 4 replies
  • 0 Likes

Resolved! OSPF and NAT

Hi,I'm running OSPF on my PA-2050 box.I'm doing NAT for a specific subnet and I would like to distribute this subnet with OSPF.Original subnet 192.168.21.0/24NAT subnet 192.168.221.0/24Neighbor routers only knows 192.168.21.0/24, how can I send the NAT subnet ?

URL Filtering Log

Hi all,Are there anyone found URL Filtering log like below:*.dropbox.com/*.settrade.com/*.facebook.com/What does " * " means?

Resolved! App ICMP vs. Ping

When icmp is specified as an application in a rule, it appears that icmp requests and replies do not match that rule. The application ping must be added to the rule for a match to occur against echo request and echo reply packets. Isn't ping a subset of the icmp protocol as a whole? I understand how to make this work by adding the application...

Controlling SafeSearch Option

Is there an easier way than to force a user to change their settings to control the safe search option? Can I enable safesearch inline through the PA? Looked through a few of the docs available, but it seems it should be a simple rule that enables safesearch without user interaction or being presented a block page.

How to generate unique IPv6 I/F Identifier on L3 "VLAN" interface?

Here is my «little» problem:Background:Extended Unique Identifier (EUI)When the link-local address is automatically generated, the device identifier is derived from the switch's 48- bit (hexadecimal) MAC address to create a 64bit Extended Unique Identifier (EUI) to be appended to the fe80 link-local prefix, as follows: - ff-fe is inserted betwee...

hankim by Not applicable
  • 3737 Views
  • 3 replies
  • 0 Likes

Resolved! About defining custom Apps.

Hello Team.As you know that custom application can be defined on PA device that has various function such as HTTP response, request and so on and I could find good docs from here but could not find any document for function about unknown-req-tcp-payload, unknown-rsp-tcp-payload, unknown-req-udp-payload, unknow-rsp-udp-payload.I want to know how ...

ttongfly by L3 Networker
  • 2704 Views
  • 2 replies
  • 0 Likes

Overload and Fixed IP Nat rule

Hello, i am trying to do somehting that hosuld be very simple and straight forward but for some reasons, its not working.My customer has two internet connections : ADSL and IP-SHDSL used as below :ADSL router used for all browsing (from all users ) -copnnected to ethernet 1/1IP-SHDSL Router used only for Fixed IP services :- Exchange Server and...

nettobe by L1 Bithead
  • 22530 Views
  • 9 replies
  • 0 Likes

what is the concept of DNS-proxy?

Hi all.I’d like to configure and know DNS proxy. Domo customer wants to configure DNS proxy. So I was read a PA 4.0 administration guide but I can’t understand completely. What concept does DNS-proxy has?? is it mapped between internal DNS and external DNS?If I will make a DNS-proxy rule, is it possible to connect internet with internal DNS serv...

willstech by L3 Networker
  • 5668 Views
  • 4 replies
  • 0 Likes

Reset to factory

I had to reset to factory, now I am prompted for a (PA-HDF Login), I have tried the normal admin/admin but it does not work. Any suggestions?

cbecker7 by Not applicable
  • 5595 Views
  • 4 replies
  • 0 Likes
  • 24334 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels