General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4120 Views
  • 0 replies
  • 0 Likes

The device rebooted because of the ZTP settings.

While aging the firewall for delivery to a customer, the following message occurred and the firewall rebooted.<The system is shutting down due to System Reboot initiated to start ztp again.> 。There are no configuration settings. I simply left the firewall on to check the health of the machine.Does anyone know why this message is occurring?...

NTLM authentication 10.2 PANOS

Hello team, We need to know if in PanOS 10.2.x version the NTLM functionality is possible to have it configured. Is possible configure NTLM in version 10.2.x? If it is not possible to have it configured, we want to know in which official documentation it is indicated that it cannot be used and other alternative. Finally, we need to know how it w...

Alpalo by L4 Transporter
  • 2601 Views
  • 1 replies
  • 0 Likes

Resolved! Autocommit fails after upgrade 10.0.4 10.1.11-h1 (PA-410)

Hi team, I upgrated from version 10.0.4 to version 10.1.11-h1 model PA-410 and now autocommit is fails "" Client logrcvr registered in the middle of a commit/validate. Aborting current commit/validate.Management server failed to send phase 1 to client logrcvrCommit failedFailed to commit policy to device "" I tried to restart process logrc...

Alpalo by L4 Transporter
  • 2209 Views
  • 2 replies
  • 0 Likes

commit issues

Anyone else getting: Error: Error reading tom datafailed to handle CONFIG_UPDATE_START(Module: device)Commit failed Issue been logged with Palo for a month now and still not solved I was running 8.0.3 when it happen and rolled back to 8.0.1 and still have the issue

Verify CA root certificate

Hi, Related to the new Emergency Update Required - PAN-OS Root and Default Certificate Expiration After you do the workaround to renew the certificate. Is there any way to check the new validation date for this internal cetificates to check its now correct? thanks

BigPalo by L4 Transporter
  • 3521 Views
  • 4 replies
  • 0 Likes

Resolved! Difference between Summary database vs Detailed logs on Custom Report

Hi everyone, I have a question about what difference between Summary database vs Detailed logs on Custom Report - When we create a report, if we use the Summary database in many of the conditions that we created, We found that when we press Run Now, the data cannot be displayed. But if we use Detailed Logs, the results can be displayed normall...

HA dedicated port inop

I setup active-passive PA-5410 firewalls (brand new) and I can't get the HA ports to communicate. The secondary has activity lights when I plug into a switch, but the other one is completely death. Is it possible that I received a new PA-5410 with a bad HA port from Palo Alto, or how can I check its status (via browser or CLI)? I configured the ...

possible to know what triggered malicious website classification on my website?

I run a small website (www.milkywayidle.com) which is an online game ran directly in the browser. after a few recent updates around 2-3 weeks ago, I saw noticed that https://urlfiltering.paloaltonetworks.com/query/ classified my website as malicious. I requested reclassify and it quickly classified to "game". However around the same time many us...

DUAL ISP IPSEC TUNNEL ECMP

Hi, FirewallDUAL ISPISP1 ETH1/1 IPSEC TUNNEL 1ISP1 ETH1/2 IPSEC TUNNEL 2 ECMP Method HASH I have ECMP enabled with DUAL ISP with two IPSEC tunnels going to another firewall with one ISP. What I am seeing is sometimes is IPSEC tunnel from Eth1/1 to the other firewall going over Eth1/2. How do I prevent this?Thanks

junior_r by L3 Networker
  • 6924 Views
  • 3 replies
  • 0 Likes

Palo Alto device is wrongly directing the traffic . DUAL ISP IPSEC VPN issue

we have two dynamic ISP in single VR with ECMP and we have setup dual IPSEC VPN tunnels towards single public IP to other paloalto . our issue that PA wrongly forwarding traffic , ISP 2 is using MAC address of ISP1 when initiating VPN traffic to public ip address of second FW. Moreover check the source MAC address ! show interfa...

mhm_ameen_1-1662458236401.png

Security Policy

hello we have taken over support of a PA there are a number of entries configured under the Security policy our customer has reported an issue that we are trying to troubleshoot can I use packet trace or packet capture to see what policy an IP Address is using ?

Change panorama mode from "management-only" to panorama-mode

Hi, We have a panorama (version 10.1.6) in management-only mode. This panorama is maging 6 FWs. We would like to change the mode to panorama in order to get the logs. So what implications should keep in mind? i think it should be necessary to increase add a new disk with high space in Vmware? Its that correct? what is the recommendation about...

SIZE.JPG
BigPalo by L4 Transporter
  • 10818 Views
  • 7 replies
  • 0 Likes

FW wrongfully declared as a spare

Hello, One of my FW is wrongfully declared as a spare and thus I can't update it without transferring licences from another FW. It seems that I can't chage this property on my managing asstets page. Can anyone help. ? Regards

  • 24336 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels