This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

question of user-id with not joined active-directory clients

Hello all.Customer has an Active-Directory. But clients are not joined Active-directory. Is it possible to configure User-ID with not joined active-directory clients at the Active-Driectory enviroment??In other words, i don't want to configure user-id with RADIUS, eDirectory, Terminal Services and etc.Thanks,Eugene.

willstech by • L3 Networker
  • 3359 Views
  • 1 replies
  • 0 Likes

Not-configured message appear on the Interface

Daer Sir,When users compalined there was no browsing, I check the pan-agent status from the cli and came to know that there was no pan agents in the firewall.After that When I check the interfacces, all interfacce were green lighly without a bright green. (Please refer the attcahed doc)and also I saw some messgaes in the log and those are mentii...

Asanka by • L2 Linker
  • 2841 Views
  • 1 replies
  • 0 Likes

Correlate VPN User to IP

Is there currently an easy way to Correlate a VPN user in trafic logs with the IP the user authenticated from?For now I am having to view the traffic in the Traffic log note the user then goto the System logs and correlate the date / time of the VPN login go see the IP they authenticated from.-Michael

Internet to Shared Gateway

Has anyone used a Shared Gateway for inbound connectivity? For example, if one wanted to host both an "Internet Surfing" Vsys for people to use for outbound Internet traffic and a separate vsys for a DMZ style setup, where users from the Internet would initiate connections into an environment. My real question lies in a scenario where you would ...

admin password not reset to default

Hi all, brand new user. Thrashing around on a new 2050 in test\learning mode. Thru maintenance mode reset system to factory defaults. 3.1.4. The admin\admin id\pw doesn't work. My old passwords don't work either. Anyone know of a admin password that it may be set to? Thanks for any light.

johnpc by • L0 Member
  • 5080 Views
  • 2 replies
  • 0 Likes

Resolved! ACC Risk Factor

Hi,i would like to know how the ACC Risk Factor is calculated?Best regardsNicolas

nmarchal by • Not applicable
  • 4180 Views
  • 2 replies
  • 0 Likes

Security Profile Exceptions

How would I create a signature exception for a specific source/dest pair within a profile?I want to use the same profile for each type (Antivirus, Anti-Spyware, Vuln Protection, etc) and apply exceptions within with source/dest pair.If I have to create new profiles and control the exceptions by applying a different profile to each policy, things...

Resolved! SSL Decryption Opt-out timeout

Hey I have noticed when I have the SSL Opt-out page turned on about halfway through the day my ssl connections that i have currently running start failing, example. Gmail/gchat start failing to connect. I typically have to open up another tab in my browser and hit an ssl page to be re-prompted for the SSL Opt-out page for my gmail/ghcat clients ...

HA configuration

I just want to check if this configuration of HA active/active is possible on PANOS 4.0.x having single router as gateway and a core switch to connect to internal LAN. From what I have seen in the HA active/active configuration, seems like router and switches are also configured as HA. If this is possible, please help me understand how to config...

evaristov by • Not applicable
  • 4273 Views
  • 2 replies
  • 0 Likes

Arp issues with L2 failover

Hi guys,We have a new PAN insatllation with a requirement for resilient links to two Cisco core switches running HSRP.We have configured the 2 interfaces on the PAN as L2 interfaces and assigned a VLAN which acts as the layer 3 IP. (see diag attached)When we shut one of the interfaces on the switch connectivity is lost and until we manually clea...

rds by • L2 Linker
  • 9954 Views
  • 5 replies
  • 0 Likes

USing PAN in a VoIP Environment (Call Center)

Hello,we just deployed our PA2020 in a VoIP environment and we are having some issues as below :we are experiencing some audio problem on one segment , When we call a remote extention, we cannot hear our correspondent while they can hear us clearly.We noticed that for SIP phones, we are experiencing the same issue. we have checked for any rules ...

nettobe by • L1 Bithead
  • 4488 Views
  • 3 replies
  • 0 Likes

Application definition - Java-Update

HiWe allowed file downloads for a group of users under the 'web-browsing' application but when they try to download a Jave update directly from the Java website, the application gets categorized as 'java-update' which is an application we block as we don't want PCs to auto-update Java.Does anyone know the criteria used to hit an application matc...

martji by • Not applicable
  • 2590 Views
  • 1 replies
  • 0 Likes

Resolved! GlobalProtect - Force client connection

Hello everybody,I've configured GlobalProtect and everything seems works good.One thing is not clear for me.If a domain user has the agent on his laptop and he's outside, is there a metod for not avoid the agent?In my test if the user write a wrongh password the agent don't establish the connection and the user can surf internet avoiding corpora...

Resolved! Order of operation

Hi:What is the order of operation for traffic flowing through the box?For example, here's a list for CheckPoint (although it's incorrect):http://www.cpug.org/forums/miscellaneous/471-order-firewall-1-operations.htmlThanks!

  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks