This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Printing Settings

Hello,Is there a way I could print our Objects - Security Profiles - URL Filtering - profiles? We have 10 so far and I expect this to grow again this year. I would like to print them so our Administration Office can compare and evauate each profile for the new scahool year.FNichelson

UIA stopping unexpectedly and not starting automatically after a reboot

Our network has 10 Windows child domains. We have a UIA installed on 2 Domain Controllers (mix of 2003/2008 Windows Servers) in each child domain. On about 8 of our 20 UIAs we have had the UIA process stop unexpectedly or not start up automatically after a server reboot. Event logs are not pointing to the issue. We are using port 55555 for t...

legeremt by • L0 Member
  • 2668 Views
  • 1 replies
  • 0 Likes

Using ACS with PA

Greetings,So, I'm looking to use ACS as a means for authentication for accessing our single PA device. I found this doc (https://live.paloaltonetworks.com/docs/DOC-1472) which has the configuration as well as the dictionary file. I guess I just have a few questions:1. Do I need to create it with all those groups? As in, are those groups only...

mrsold by • Not applicable
  • 5276 Views
  • 3 replies
  • 0 Likes

Resolved! PA Security Policy is not working after comitting the change

Hi,We have a rule to allow ICMP between the DMZ server to an Internal Server and vice versa. When I added another Internal server to the rule, I saved, and I committed the change. Afterwards, it was still not working; I still cannot ping to my server. When I checked on the logs, everything showed OK, except under Application, it shows 'incomplet...

rmarquez by • Not applicable
  • 2469 Views
  • 1 replies
  • 0 Likes

Cisco SCPS traffic being dropped

I thought I'd ask this here as I feel like it may show up again sometime if someone has an answer. We're deploying Palo Alto behind a pair of Cisco ASAs and there's a minor issue. It looks like (through packet capture on the Palo Altos) SCPS traffic is being dropped between the ASAs on their inside interfaces. The ASAs report an error about e...

Resolved! NAT Logging?

Does anyone know if the system logs previous NAT translations? I have the public IP of one of our users who may have committed a copyright violation and need to trace to the private IP. Also, is there any way to set the duration of NAT translations?Thanks in advance!

bvest by • Not applicable
  • 3786 Views
  • 2 replies
  • 0 Likes

Resolved! Wild Card searching in Traffic Monitor

Hi all, This probably has a real simple answer but it has got me stumped. How do I do wild card searches in 4.x PAN Traffic logs ? For example, I want to find all traffic from a Class C subnet 192.168.1.x. Using a * does not seem to work ( ( addr.src in 192.168.1.* ) ) and throws a syntax error.Cheers,

dpenhall by • L2 Linker
  • 11064 Views
  • 2 replies
  • 1 Likes

I keep getting "key invalid" using PANrest AP1 for reporting

Greetings,This is my first post on KnowledgePoint, so apologies for any breaches of etiquetteRelevant info:Panorama version 3.1.7Attempting to use the API to run a report per this article: https://live.paloaltonetworks.com/docs/DOC-1031I have generated my key with my account used to access Panorama. It is a AD account (not local to Panorama). ...

jmueller by • L1 Bithead
  • 2658 Views
  • 1 replies
  • 0 Likes

[ipv6] traceroute gives link-local address

I've setup ipv6 routing on a PA-2050 (software 4.0.4). When I do a traceroute from a client I always see the link-local address off the PA instead of the unicast adress. Does anyone know how to change this? 2 2 ms 1 ms 1 ms 2001:6a8:2500:10::1 3 <1 ms <1 ms <1 ms fe80::21b:17ff:fe00:3f13 <----- ???? 4 1 ms ...

Resolved! Splunk For Palo Alto configuration

Hi,I am using Splunk as a tool to collect and correlate logs coming from my PAN, i am trynig to configure splunkforPaloAlto Application under Splunk but i don't see the 4 types of log files (Threat, traffic, System and configuration), i'am seeing only the traffic log, i am following the configuration guide to configure this application but i can...

nmarchal by • Not applicable
  • 6430 Views
  • 3 replies
  • 0 Likes

Resolved! How to monitor CPU usage with SNMP?

I'd like to keep a trace of CPU usage of our PaloAlto P500 using SNMP?What's the OID for CPU usage as it shows up in the dashboard?Thanks in advance,Emmanuel

senbel by • Not applicable
  • 14511 Views
  • 5 replies
  • 1 Likes

SSL Decrypt

Does using a Trusted CA from GoDaddy work with SSL Decrypt? Right now when I enable the SSL Decrypt for any catagory it flat blocks them with nothing more than a Cannot display page. I tried to decrypt gmail as a test but it just blocked it even though users are allowed to get there. When I go to http://www.facebook.com I get the app denied page...

Panorama sharing security policy across device groups?

Is there a way in panorama 4.0.2 to create and either copy the policy to a new device group or have a shared policy that can have a target of all devices? We currently have 12 device groups (due to muliple vert systems.) and i would like an easy way of putting security policy on all of the devices. I don't see any "Shared" device group when I a...

  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks