This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4111 Views
  • 0 replies
  • 0 Likes

Captive Portal - One Time Password

Hi All,Is it possible to use a 2 Factor Radius OTP solution with captive portal, I have managed to get a solution set up for the SSL VPN which once you have entered your username and password you get another screen which prompts you for the OTP which is either sms or emailed etc.However when using the same radius authentication profile on captiv...

Resolved! Dead sites issue

Hi All,I have a site that is categoried under Dead sites by birghtcloud, as well as the local-db of PaloAlto.the site ishttp://qw131.qhit.net/osehp/quote.cgi?F=template/popdetailquote&QCODE=1944&MKTN=O&mode=Iso on my URL Filtering I allowed *.qw131.qhit.net/* , mind you Dead sites is still set on block.But my assumption was PaloAlt...

Mgmt Traffic through VPN Tunnel

I have a fairly straightforward network topology for a firewall at a remote datacenter with one little catch. The PAN's revenue interfaces are an Internet interface, an internal interface, a DMZ interface, and a device management network. The catch is the PAN's MGMT interface lies on the device mangement network for which it is also the default ...

cosx by • L2 Linker
  • 3112 Views
  • 1 replies
  • 0 Likes

Custom Report and User ID

We are running PA 2020 with Software version 3.1.6. We noticed when we run custom report with user ID , the logs mix-up Source Host address. For exampleA week ago I logged in with a computer name Laptop 1 for a day , and past 6 days I logged in with a computer name Laptop 2. This morning when I ran a report with my user ID just for yesterday , ...

ssarcar by • Not applicable
  • 3063 Views
  • 3 replies
  • 0 Likes

translation vs url block/threat block

Hi,I just came across something quite interesting. A user needs to be able to translate a decent url, but by default translation is blocked by PaloAlto. Once you configure PaloAlto to allow translation, you can actually go into google translate, and translate an adult website into another language and view it within Google translate's page. My q...

Load Balancing Using Dynamic Routing

Is it possible for the PAN to load balance sessions across two equal cost default routes establish in an OSPF process that the PAN firewall participates in?If not, can this be accomplished through BGP?We have one ISP with two connections to the Internet, each with it's own router. We would like to participate in dynamic routing and accomplish s...

nsteffens by • Not applicable
  • 2980 Views
  • 1 replies
  • 0 Likes

Traffic forwarding based on security policy?

We have been trying to troubleshoot an issue for a couple weeks now. We seem to have found the issue, but it doesn't make sense. I'm hoping someone can shed some light on this:First off, we have a pair of PAN-4020's in HA @ 3.1.9.I'm going to oversimplify the situation, but I think the logic will hold:Segments A, B and CSegment A is a user seg...

bhelman by • L2 Linker
  • 3990 Views
  • 4 replies
  • 0 Likes

Cannot browse nat webpage internally in lan

Hello All,We have some internet facing servers who has NAT public address.1) Externally we can access the public address of the server.2) Internally on our LAN, we cannot access the public address of the server, it timed out. However the appliance monitor tab shows accept, nothing was denied.The policy rules i set wasAny to Any - Server_...

mmxong by • Not applicable
  • 2833 Views
  • 2 replies
  • 0 Likes

Resolved! System Log monitoring via email?

Is there a way to have notifications sent on system log events, either via SNMP or email, in 3.1.8?Perhaps I am just not seeing it in the config, my apologies.Thanks.

KGC by • L3 Networker
  • 4341 Views
  • 2 replies
  • 1 Likes

Antivirus job failed

Dear Sir,I am getting above error message in my logs even though the Av update has taken palce. Ths is 2nd time i saw the messgae in the log.And also I can see some unusual logs in the logs. pleasee see the attched log file.Regards,Asanka

Asanka by • L2 Linker
  • 7602 Views
  • 7 replies
  • 0 Likes

Resolved! URL Catagories Report

I have several URL filtering policies defined on the objects tab with my PA-2050 and would like to be able to dump that information into a report / spreadsheet for my manager etc. Is there a way to do this? It would also be benificial to me so that I can check my policies against each other. If there's a command line way to dump that config o...

SSL Renegotiation Denial of Service Vulnerability

Hi All,I have received an Alert for SSL Renegotiation Denial of Service Vulnerability.I have visited the website, and for some reason, Palo Alto thinks i am the attacker,and the website i am visiting is the victim.I have attached screen shots of this issue, please help me in understanding this issue/threat.I am not sure how to treat it and why P...

  • 24332 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks