This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4236 Views
  • 0 replies
  • 0 Likes

Can I not to install user identification agent to the domain controller?

The client would like to use their Active-Directory for user identification in PAN.However, they are not prefer to install the agent in their domain controller.Is it possible to install the agent in a computer which has already joined the domain, but not on the domain controller?If so, what rights the user account/computer should have?Please als...

frankchow by • Not applicable
  • 2677 Views
  • 1 replies
  • 0 Likes

Outbound email traffic is using the public IP assigned to FW external interface

Hi,New user of PA Firewall here. I noticed that when we send out emails, the recipient is seeing that the email comes from the public IP which is assigned to the external interface of our PA firewall. Before moving to PA, we can see the public IP NATed to our email server. Is there any configuration we missed? Or is this how it should be?Appreci...

rmarquez by • Not applicable
  • 4184 Views
  • 3 replies
  • 0 Likes

Resolved! APP limitation using PBF

Hi,after doing an upgrade from 4.0.1 to 4.0.3 the candidate config fails due to incompatible app used at PBF. Where can I find the compatible app with PBF? There's no way to use custom app with pbf?Thanks,Robclav

Resolved! About APPs with PBF

Hello Team.I seached and know that PBF can be used with Application that not to have HTTP tunnel function and application dependency. so I want to know what application is can be used with PBF rule. If you have a list of application for PBF, let me know. Thanks.Regards.Roh.

ttongfly by • L3 Networker
  • 2642 Views
  • 1 replies
  • 0 Likes

Wildcard Cert Import

I'm trying to import a wildcard cert for a domain we own and encouring several problems. First, I can't seem to import a cert without a pass phrase. Second, I'm getting the below error even though the name I'm trying to use is only 20 characters:name can be at most 32 charactersInvalid nameIs there a way to get around either problem? I'm thin...

nlevay by • Not applicable
  • 4907 Views
  • 4 replies
  • 0 Likes

Permit ICMP to dynamic NAT address

I have an odd request. We (pardon the non palo alto lingo) PAT our traffic out a specific address. We need a way to have our remote global load balancers to ping back to the source address of the users (the PAT address) to create proper load balancing metrics. The IP address of the dynamic NAT is not pingable (but static nats are).Any way to m...

btraister by • Not applicable
  • 2885 Views
  • 1 replies
  • 0 Likes

VPN authentication OK, user authentication KO

Hello We have an active directory forest with 2 domains:The first one as been configured in our PA2020 to allow VPN access through Radius and then we use AD groups to make policies rules.All works fine. At login, users specify “username” and password without domain name.Radius allows access and in PA2020 logs we can see user name: “domain1\usern...

admincda by • L1 Bithead
  • 3751 Views
  • 3 replies
  • 0 Likes

Resolved! APP-ID for Google+ ?

Hi Folks,there are already more than 20'000 Google+ profiles but no APP-ID for it?Any information on this?Regards,Sylvia

sylvia by • L1 Bithead
  • 4405 Views
  • 4 replies
  • 0 Likes

PA-500 alarm led issue

Hi AllI got an issue with PA-500 alarm-led is light and when I debug with cli and someing shown fllowing.>show log system severity equal critical2011/07/19 10:01:22critical general general 0 Chassis Master Alarm: Temperature 2011/07/19 20:10:22critical general general 0 Chassis Master Alarm: Cleared2011/07/19 20:16:22critical ...

Proxy Setup

Hi All; We are integrating a few products that require portal capture and integration with proxies. Is there a way we can force traffic for http and https to use a proxy with specified settings, this might be a n00b question as I didn't go head to toe through the postings yet.

amansour by • L4 Transporter
  • 4400 Views
  • 7 replies
  • 0 Likes

Wrong Traffic Reports in ACC

HiWrong user traffic in ACC than the actual traffic.Here we are monitoring our server Farm using Tap mode with our Palo Alto In ACC we can see very high traffic from some Domain/User or IP to some servers.Lets say some users making 20 gb traffic Exchange server or other servers with in Hour.If you look at the detailed traffic there is no such t...

shabeerc by • L2 Linker
  • 3652 Views
  • 4 replies
  • 0 Likes

Custom ID - SMB Share Error - Length is 127

Hi,I am trying out the custom-id smb-share guide with the following share\\192.168.1.1\test_shareI have replaced all the characters with the unicode chart but i could proceed to save as it says the maximum length is 127Any advise on how to proceed ?ThanksBen

mmxong by • Not applicable
  • 3991 Views
  • 3 replies
  • 0 Likes

Resolved! how to remove a custom url category from url filtering profile

HI,how can i remove a custom url category from url filtering profile. it seems that by default, any custom url you create will be listed in the url filtering profile in an alphabetic order.if i have created specific custom urls for different ad groups, but the traffic matches the first possible custom url, and hence you cannot even block a custo...

is it possible to configure active active with 4 ADSL lines?

Hello all.I have a networks design question with PA-500. Customer has 4 ADSL internet lines from 2 different ISP. (ISP-A offer 2 ADSL lines, ISP-B also offer 2 ADSL lines.) Customer want to configure Active Active with 4 ADSL lines. I found article from knowledgepoint. (https://live.paloaltonetworks.com/docs/DOC-1357)But it is just explained act...

willstech by • L3 Networker
  • 3612 Views
  • 2 replies
  • 0 Likes
  • 24358 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks