This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Problem with ipsec vpn session

HiI hope that someone can bring some insight in to this problem.The situation is this:Two out of seven configured ipsec tunnels are having some kind of connection issue. Our monitoring system will notify me that the VPN connection is down. I have then tried to "ping" the inside interface of the remote firewall (Fortigate in this case), with no r...

admin3r by • Not applicable
  • 11633 Views
  • 9 replies
  • 0 Likes

Is there a limit on the icmp pakets size?

Hello,We try to make ping throw a PAN-4020 device, whene we try with a 1023 byte pakets it works, but wehen we try with a 1024 byte pakets this is rejected by the PAN. Is there any limit on the icmp paket size?Also, whene we activate the jumbo frame mode on the device, is there any impact on traffic or on the function of the device (reboot requi...

asia by • L3 Networker
  • 2987 Views
  • 1 replies
  • 0 Likes

vwire loop into tap port for QoS demo

Guys,To show QoS, when running a PoC using out of band traffic, will connecting a tap port via the factory v-wire interfaces work?So out of switch mirroring traffic, into trust vwire->untrust vwire->tap ?Thoughts?

KatanaNZ by • L3 Networker
  • 4564 Views
  • 5 replies
  • 0 Likes

Image File Authentication Error Failed to extract rpm file

when I am updating my application and threat dabase to 260-1085, I am getting following error.content update failed with the following messages: Image File Authentication Error Failed to extract rpm file /opt/pancfg/mgmt/content-images/tmp/panupv2-all-contents-260-1085.tgz Following is my disk usage.admin@PA-2050> show system disk-spaceFilesy...

why would i see traffic on a standby HA PA2020?

Hi,We've just had a couple of PA2020s installed in an Active-Passive HA configuration, running v3.1.7, and I'm trying to diagnose an FTP problem which may or may not be related to the installation. One thing I have discovered is that we're seeing a small amount of traffic (probably less than 1% of the total) on our standby PA2020, but just from ...

FIPS mode algorithm decryption?

The FIPS Mode notes state:"Non-FIPS approved algorithms are not decrypted and are thus ignored during decryption"Can someone clearify what exactly this applies to, and what is not decrypted?

KatanaNZ by • L3 Networker
  • 4729 Views
  • 4 replies
  • 0 Likes

Can't authenticate users in nested groups (AD, Radius)

Hi All,I have a rule to allow access to Facebook. The rule works if I list individual users, but not groups.We have a single forest with 2 child domains.Universal Group "FB Allowed" has the following groups as members: "OU1 FB Allowed" and "OU2 FB Allowed"These universal groups contain members from both domains.I'm trying to avoid having to ma...

kill hung jobs?

Hi all,How do I kill a job that has hung, such as a content download, that stops all other downloads from being able to run?

KatanaNZ by • L3 Networker
  • 9734 Views
  • 2 replies
  • 0 Likes

Resolved! Hosting Websites - Google "Crawling" issues...

I haven't found the cause just yet, but I've noticed that since implementing our PAN firewalls, (PA-2020) I've noticed in our Google Webmaster tools that Google has stopped indexing our websites. This is causing me big grief as you could imagine. Now, I am allowing incoming "web-browsing" but I have to wonder if somehow the firewall is blocking...

cenders by • L3 Networker
  • 4088 Views
  • 2 replies
  • 0 Likes

LDAP Schema Attribute as User Report filter?

Hi All,I have a curly one, that a site has tried multiple solutions from HP, solarwinds, checkpoint, juniper etc etc to solve, and its all based around executive level reporting.They have one large OU, with all users in it, two main classes, and then say 6 divisions in each class.The execs want usage reports, initially with a split between class...

KatanaNZ by • L3 Networker
  • 2557 Views
  • 2 replies
  • 0 Likes

MAC Destination Problem (4.0.4)

We have a new pair of PA-2050 (HA).The last two weeks works fine with 4.0.1 but last Thursday I upgraded them to 4.0.4 and two of our networks had problems to go trought the firewalls.I saw in the traffic monitor that the rules were ok and that traffic were allowed, but the response not reach any equipments of that network.Then i use wireshark a...

pan agent

Hello Guys,sorry to bother you.have a question, for Pan agent to identify users traffic. does it use only the management port ? ? ?regards,bp

nettobe by • L1 Bithead
  • 3171 Views
  • 3 replies
  • 0 Likes

Resolved! Temperature setting

Does anyone know what the high temperature alert setting is on a PA-500? Are the alerts user configurable?Mike

Activate Zone Protection with default values

Hello,How safe is to activate Zone Protection with default values in terms of having problems with blocking normal traffic afterwards? Is there a way to measure from Palo Alto (3.1.7) the total incoming packets/sec to our network in order to be able to customize the Zone Protection default values?Kind Regards,Andreas

  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks