General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4237 Views
  • 0 replies
  • 0 Likes

Resolved! URL Filter Continue mode requires constant refresh

I am testing a URL filter that when a user tries to go to facebook, they are presented with the PAN URL "Continue" page (see attached). They are allowed to go to the page if they click on Continue to acknowledge they will be tracked. This works fine initially, but it seems as though there is some sort of timeout. If the page sits idle for about ...

ssl_vpn

i have created a ssl vpni can access it from outside but from inside iam unable to reach

Application Dependencies

What is the deal with all the dependencies when adding specific applications or application groups containing filters?Feature Request: it would be nice to show a prompt of dependencies when an application is added with an option to add the required dependencies.When commiting the policy, a dependency warning appears each time until the dependenc...

rjkhatri by L1 Bithead
  • 6168 Views
  • 5 replies
  • 2 Likes

PA specifiations and limitations

Hello,We are using Panorama to manage all our PA devices. Depending on our needs, we use plateforms from PA500 to PA5050. Last week we tried to commit a change to a PA500 and we get the message : address group limit exceeded !!!! At the moment we have 253 address groups. So the limit seems to be 250 address groups for a PA500.Could you give us ...

bdaussin by L0 Member
  • 5302 Views
  • 7 replies
  • 0 Likes

Internet Performance issues

Good Morning EveryoneWe recently installed a new PA-500 with OS 3.1.4 loaded. URL Filtering was disabled. After enabling URL filtering internet speed degarded to the point of it takes 10min to open a site like google.... hiting refresh once or twice will open the site imediatly without any problems. Sometimes sites only gets loaded half. After r...

u7285 by Not applicable
  • 7304 Views
  • 10 replies
  • 0 Likes

ssl traffic blocking after enabling qos for youtube

HiI create qos rule for youtube. create Qos profile with 2 MB in class 8 and assigned to the interface.Also create security rule apply this class only to youtube application.After enabling the profile to interface all other ssl traffic is freezing like gmail etc.The device we configuring in PA-4020 with PAN-OS 4.0.1 and the mode of installation...

shabeerc by L2 Linker
  • 3612 Views
  • 4 replies
  • 0 Likes

Resolved! Manipulating application groups from command line

Hi all, Does anybody know how to replace the contents of an application group from the command line please?Our application groups change frequently so I would prefer to use command line over slow guiThe following command will add the listed applications to "myappgroup" but what I really want is to replace what is currently in the group with thes...

DavePalo by L4 Transporter
  • 5381 Views
  • 3 replies
  • 0 Likes

cannot access website login,no logs to help

Hi All,i am trying to login to www.hoovers.com fromhttp://subscriber.hoovers.com/H/login/login.htmlThe page comes up but i cannot see the login fields.I have enabled alert on all url categories and also put *.hoovers.com/* in the allowed list, but i cannot see anything in the logs that will help me.when i connect directly to the internet, i can ...

Help setting up a return route

Hi,I am in the process of migrating internet connections, at the moment we have a PA-500 with 3 active internet connections, traffic is routed between different connections using policy routing. This is fine for outbound traffic, however inbound does not work as the traffic attempts to return via the default gateway.There seems to be no implemen...

andyyps by Not applicable
  • 5647 Views
  • 5 replies
  • 0 Likes

Resolved! PanOS 4.0.3 - CLI options missing

HiWe seem to been missing several set options (e.g. set profiles). We recently upgraded to 4.0.3 but this is the first time I've looked to set anything like this since the upgrade.The user account I am using has full read/write access.Are we hitting a bug?RegardsJim

martji by Not applicable
  • 4731 Views
  • 6 replies
  • 0 Likes

Captive Portal - One Time Password

Hi All,Is it possible to use a 2 Factor Radius OTP solution with captive portal, I have managed to get a solution set up for the SSL VPN which once you have entered your username and password you get another screen which prompts you for the OTP which is either sms or emailed etc.However when using the same radius authentication profile on captiv...

Resolved! Dead sites issue

Hi All,I have a site that is categoried under Dead sites by birghtcloud, as well as the local-db of PaloAlto.the site ishttp://qw131.qhit.net/osehp/quote.cgi?F=template/popdetailquote&QCODE=1944&MKTN=O&mode=Iso on my URL Filtering I allowed *.qw131.qhit.net/* , mind you Dead sites is still set on block.But my assumption was PaloAlt...

Mgmt Traffic through VPN Tunnel

I have a fairly straightforward network topology for a firewall at a remote datacenter with one little catch. The PAN's revenue interfaces are an Internet interface, an internal interface, a DMZ interface, and a device management network. The catch is the PAN's MGMT interface lies on the device mangement network for which it is also the default ...

cosx by L2 Linker
  • 3135 Views
  • 1 replies
  • 0 Likes
  • 24358 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels