General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

 

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

jforsythe by Community Team Member
  • 269 Views
  • 0 replies
  • 0 Likes

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 3590 Views
  • 2 replies
  • 14 Likes

Resolved! what "session table utilization" is really mean?

Hello guys.

I have question about session information of PA. PA showed session table information after command "show session info"

And this command contains that information of "session table utilization" but I wonder about that information about maxim

...

ttongfly by L3 Networker
  • 2371 Views
  • 2 replies
  • 0 Likes

Resolved! About Link Aggregation

Hello guys.

I tested about link aggregation for PA4060 that connected CISCO SW. but PA only connected "channel-group mode on" that mean disabled PAgP en LACP only with Cisco SW.

I think PA should connected other devices using LACP (802.3ad) but result

...

ttongfly by L3 Networker
  • 4902 Views
  • 4 replies
  • 0 Likes

Not able to get DNS working

Hello,

After visiting the forum, i have tried all options, but still the PA 500 wouldnt talk to the outside world.

Source recognition under device to routing has all been checked. But there is one peculiar error which

i am getting again and again  Devic

...

nsalian by Not applicable
  • 3964 Views
  • 4 replies
  • 0 Likes

Resolved! Palo Alto configure as access port

Hi All,

It has been sometime that i haven't touch on Palo Alto device and i want to clarify whether can i configure as access port (or called as untagged port) other than normally create L3 vlan routing?

I don't see such settings available on the confi

...

eugene by Not applicable
  • 2918 Views
  • 1 replies
  • 0 Likes

Resolved! Filtering On Multiple Brightcloud Categories

I have come across a site that has been assigned three categories by Brightcloud. They are Streaming Media, Adult and Pornography, and Internet Communications, in that order. In our setup we allow Streaming Media and Internet Communications but block

...

shopeman by Not applicable
  • 4329 Views
  • 6 replies
  • 0 Likes

Looking for options to control access to web site.

I've read the authentication doc, but have not found a suitable solution for limiting access to a single hosted site via the PA.  Is there something I am overlooking?

What I'd like to do:  Host a test site, but only offer access to users we hand pick.

...

JKoss by L2 Linker
  • 1663 Views
  • 1 replies
  • 0 Likes

Resolved! Application or Service Port

Hoping someone can help me out here:

I have a system that needs to ssh/sftp/http/https.

I attempt to define using applications: ssh/ssl but cannot find any for http or sftp. If I search the applipedia for the port, it shows other apps that are on port

...

dc_cubed by L0 Member
  • 5541 Views
  • 2 replies
  • 0 Likes

frequently HA connection down

Hi,

we have 2 PA-500 configured in active-passive mode.

Since two week ago we frequntly receive na alarm about the Ha connections that goes down and then goes up.

We have checked and changed the crossover cable used for the Ha interface; we have increas

...

u4353 by Not applicable
  • 4740 Views
  • 6 replies
  • 0 Likes

Resolved! Drive-By Protection?

We're finding that there's a small amount of drive-by stuff, typically fake AV, that's making it past the content filtering, spyware filtering, and antivirus filtering in our Pan running 3.1.8.

Are there any non-default settings that are recommended a

...

Resolved! UI Functionality - Simultaneous Edits

When you are editing your policies you can select multiple rows and use the  functions at the bottom. However, in my experience, if you click on a setting, such as profiles, it lets you edit just the  one attribute even though you have several rows s

...

dc_cubed by L0 Member
  • 2150 Views
  • 1 replies
  • 0 Likes

URL Filtering Activation

Hi,

URL Filtering Activation.

I have activated the URL Filtering Lic, but still when I click on Objects > URL Filtering
it shows me " License required for URL Filtering to function "

Also when I go into devices, and Licensing, i see the following.

Date Is...

ta185020 by Not applicable
  • 4783 Views
  • 9 replies
  • 0 Likes

Resolved! Captive Portal Ports in PANOS 4.0

Hello everybody,

When enabling Captive Portal either in vWire or Layer3 mode, the Layer3 interface that is used for redirection and has the "Response Pages" option enabled, is listening to certain ports for Captive portal.

Let's say that the configured

...

ggoudr by L2 Linker
  • 3140 Views
  • 1 replies
  • 0 Likes

Which ports are being used by PAN?

When you for example set an url-category into "continue" the continue response-page is issued through tcp 6079.

However there is no need to setup a policy for this traffic since the PAN will handle this on its own.

But when I enabled captive portal wit

...

rps by L3 Networker
  • 3147 Views
  • 2 replies
  • 0 Likes

Resolved! Client IPSEC VPNs

Hi, Can anyone confirm whether IPSEC VPNs(Client) be integrated with active directory for authentication ?

  • 24172 Posts
  • 100 Subscriptions
Top Liked Authors
Labels