This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Panorama sharing security policy across device groups?

Is there a way in panorama 4.0.2 to create and either copy the policy to a new device group or have a shared policy that can have a target of all devices? We currently have 12 device groups (due to muliple vert systems.) and i would like an easy way of putting security policy on all of the devices. I don't see any "Shared" device group when I a...

Resolved! Sharing a radius authentication-profile from panorama to a vsys-enabled firewall ?

Hi,When I define a shared radius-authentication-profile on panorama , this profile gets published into all my panorama managed firewall.So far so good.But when this gets pushed to a vsys-enabled firewall, then the authentication profile is pushed only into the vsys-contexts and not into the device context.-> This has as result that the radius...

email scheduler and weekly reccurence

Hello,I have setup some customs reports for my customer. I have choose 'Every monday' reccurence for the emailing, but this features doesn't seem to work: the members of the email profile receive a new reports everyday.Any idea ?Best regards.

fdeletang by • Not applicable
  • 2675 Views
  • 2 replies
  • 0 Likes

Allow certain EXE downloads by filename

I use data filtering and currently block EXE downloads amoung others. My problem is now my users can't download updates to their malware software. The malware software we use currently doesn't offer a centralized management feature so the updates have to be downloaded from the web. The updates come from a content delivery network so the only way...

ghight by • L0 Member
  • 7456 Views
  • 3 replies
  • 0 Likes

No space left on device

I'm trying to upgrade software 4.0.1 -> 4.0.2. When I am downloading new image via web I receive following error :Traceback (most recent call last): File "/usr/local/bin/swm", line 10, in ? swmmain.main(sys.argv[1:]) File "/usr/share/pan-swm/swmmain.py", line 91, in main UI.runCommand(H) File "/usr/share/pan-swm/swmcli.py", line...

darkfibre by • Not applicable
  • 9901 Views
  • 6 replies
  • 0 Likes

synchronization in progress issue

Hello,We're new PA users - we've brought up a pair of 5050s running 4.0.3 with the HA patch for virtual systems and we're getting a "synchronization in progress" message for prolonged periods. It then eventually reverts to not synchronized. We can't find anything in the logs and doing a config diff has us a little stumped - it shows a diff in ...

Resolved! Panorama 4.0.3 - System Logs not showing source device

I have a Panorama server running PANOS 4.0.3 with 2 PA-4020s connected to it running PANOS 3.1.8. I noticed since upgrading the panorama to 4.0.3 that the system logs no longer show the device name or IP that sent the system log to the panorama. This is a challenge because I can not identify which system log is coming from which managed device i...

Disable SIP ALG

Hi,Is there any way of disabling the PAN SIP (Session Initiation Protocol) application ? My Voip provider has asked to turn SIP ALG off as they think its interfereing with the headers.https://live.paloaltonetworks.com/docs/DOC-1216 This article says the PAN SIP app acts as a Application Layer Gateway.Regards,Sunil

Resolved! manage standalone or in panorama

I heard its best to manage the firewalls in Panorama. I have imported the primary and secondary firewalls into Panorama.....i had 1 security rule that i added directly into the firewall (not via Panorama) - any ideas why i cant see this rule from Panorama? just trying to understand this before i start adding rules and updating the firewallstha...

sue_town by • Not applicable
  • 7154 Views
  • 8 replies
  • 0 Likes

Configuring URL filtering from command line

Hi all,Just wondered if anybody knew of a quick way to apply the same action to all categories within an URL filter please?It's not the end of the world if it can't be done, it just seems to me that a wildcard option would be useful.For example, if I wanted to create a URL filtering profile called "minimal" which just allows 3 categories, I woul...

DavePalo by • L4 Transporter
  • 4489 Views
  • 4 replies
  • 0 Likes

Resolved! bright cloud updates 3.16

Recently i have requested to make changes in one URL from brightcloud because of the wrong catergories and they said they have made changes in 3.61 version.i have downloaded the lastest updates 361 for URL in paloalto , still when i open the site it is coming in the wrong catergoies .

jerry by • L1 Bithead
  • 6043 Views
  • 9 replies
  • 0 Likes

Resolved! query on cpu usage limit

Hi,Can anyone clarify me on below queryIn CLI if we type show resource monitoring, it will show us the status for cpu ...what parameters should consider in resource monitoring(for IDS Health check)and what is the max limit for cpu usage and buffer size capacity.ThanksPriya

Is it risky to that allow browser-based apps on any ports

I'm considering to create a policy for Internet access to replace traditional Internet rule (i.e. outbound 80/tcp or any other ports raised by user per special request). To minimize future special request by user, I prefer to allow any ports if app-id identified the traffic as "browser-based apps". Would it be too risky to enable such rule (pr...

u7541 by • Not applicable
  • 2655 Views
  • 1 replies
  • 0 Likes
  • 24403 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks