General Topics
Showing results for 
Search instead for 
Did you mean: 
General Topics

Forum Posts

Happening in June: The Complete Zero Trust Network Security Event

Greetings everyone, Don't miss Palo Alto Networks' Complete Zero Trust Network Security event coming up in June. This event will cover the following points related to the newly unveiled Zero Trust Network Security: Secure access to the right applicat...

jdelio by Community Team Member
  • 1 replies

Resolved! GlobalProtect, Working from Home, Prisma Access and Covid-19

To all, Just wanted to post a message about the Hot Topic right now, which is Covid-19. With all of this going around, everybody's health and safely is the utmost concern. Keeping your hands clean, washing your hands (A LOT), using hand sanitizers, a...

jdelio by Community Team Member
  • 41 replies

cli scripting mode without strict check

Hi, sometimes you have set cli config that you want to paste in CLI mode but in some occasions order of the commands is not correct. For example something like below. For the followingto work address object must be above the group otherwise you will ...

Where do you get additional threat feeds from

Hello All,Just curious as to what additional threat feeds you use to ingest into your PAN. Here are some of the ones we use:Threat intelligence blocklists

Resolved! How to clear global protect previous users

I configure global protect users in address about 1000 for future plan.but users is only about 200.when gp users connect, it cannot get old IP address. Get new IP address.How can I clear previous users and IP address.

zayyar by L0 Member
  • 2 replies

GP Data file: You do not have a global protect license

Hello we are trying to implement HIP checks for our users but we seem to be getting many clients not reporting AV installedwe have the same clients in the same locations and other gateways all reporting correctlywe have checked the non-compliant desk...

Resolved! GP portal not accessable

Dear All, I am trying to access the GP portal but getting an error, site not reachable. I have performed some troubleshooting and took packet capture between the client and the portal address and found TCP handshake is not complete. below is the scre...


SSL Decryption

We are doing SSL decryption in another Vsys for the traffic published over the internet based on SSL. We need to know if the high utilization is due to that SSL decryption happening in another Vsys ? as we are planning to move this SSL decryption set...


Hi Team, May I know, what users limit in Palo Alto PA-220, Currently VPN connection is maximum 21 (from – But now, users request need more SSL VPN users. What need to do is buy a license or what.? Thanks

How to physical link down when rollback

Hi, I am using the 5.x version of paloalto.HA is Actvie(FW1) - Passive(FW2) configuration and use link group.For example, failover occurs when the wan link goes down. (FW2 / Actvie)When the wan link is up rollback.(FW1/ Actvie) At that time, the enti...

Upgrade Palo Alto via Panorama

Hello, We have 100 Palo altos firewall that we would like to upgrade via Panorama to 9.0.7, I am trying to create a group based on the prisority of upgrade to push the device>deployment >software package. Is there a way from Panorama 9.0.7 to create ...

Hani2903 by L0 Member
  • 2 replies

Resolved! Blocking DNS-over-https

Hi, I plan to create security policy rules to block dns-over-https and dns-over-tls. Is it also recommended to block dnscrypt? In regards to dns-over-https. If the browser attempts this and fails, does it fallback to using the client's configured dns...

ce1028 by L3 Networker
  • 5 replies

Application Override Video & Voice

We have Palo Alto firewalls, version 8.1.x. We heavily use Webex (application and physical boards), Jabber, and MS Teams both in the Corporate office and by GlobalProtect VPN users. I'm considering using Application Override for many of these Voice a...