This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! URL Filter Continue mode requires constant refresh

I am testing a URL filter that when a user tries to go to facebook, they are presented with the PAN URL "Continue" page (see attached). They are allowed to go to the page if they click on Continue to acknowledge they will be tracked. This works fine initially, but it seems as though there is some sort of timeout. If the page sits idle for about ...

ssl_vpn

i have created a ssl vpni can access it from outside but from inside iam unable to reach

Application Dependencies

What is the deal with all the dependencies when adding specific applications or application groups containing filters?Feature Request: it would be nice to show a prompt of dependencies when an application is added with an option to add the required dependencies.When commiting the policy, a dependency warning appears each time until the dependenc...

rjkhatri by • L1 Bithead
  • 6408 Views
  • 5 replies
  • 2 Likes

PA specifiations and limitations

Hello,We are using Panorama to manage all our PA devices. Depending on our needs, we use plateforms from PA500 to PA5050. Last week we tried to commit a change to a PA500 and we get the message : address group limit exceeded !!!! At the moment we have 253 address groups. So the limit seems to be 250 address groups for a PA500.Could you give us ...

bdaussin by • L0 Member
  • 5527 Views
  • 7 replies
  • 0 Likes

Internet Performance issues

Good Morning EveryoneWe recently installed a new PA-500 with OS 3.1.4 loaded. URL Filtering was disabled. After enabling URL filtering internet speed degarded to the point of it takes 10min to open a site like google.... hiting refresh once or twice will open the site imediatly without any problems. Sometimes sites only gets loaded half. After r...

u7285 by • Not applicable
  • 7655 Views
  • 10 replies
  • 0 Likes

ssl traffic blocking after enabling qos for youtube

HiI create qos rule for youtube. create Qos profile with 2 MB in class 8 and assigned to the interface.Also create security rule apply this class only to youtube application.After enabling the profile to interface all other ssl traffic is freezing like gmail etc.The device we configuring in PA-4020 with PAN-OS 4.0.1 and the mode of installation...

shabeerc by • L2 Linker
  • 3753 Views
  • 4 replies
  • 0 Likes

Resolved! Manipulating application groups from command line

Hi all, Does anybody know how to replace the contents of an application group from the command line please?Our application groups change frequently so I would prefer to use command line over slow guiThe following command will add the listed applications to "myappgroup" but what I really want is to replace what is currently in the group with thes...

DavePalo by • L4 Transporter
  • 5557 Views
  • 3 replies
  • 0 Likes

cannot access website login,no logs to help

Hi All,i am trying to login to www.hoovers.com fromhttp://subscriber.hoovers.com/H/login/login.htmlThe page comes up but i cannot see the login fields.I have enabled alert on all url categories and also put *.hoovers.com/* in the allowed list, but i cannot see anything in the logs that will help me.when i connect directly to the internet, i can ...

Help setting up a return route

Hi,I am in the process of migrating internet connections, at the moment we have a PA-500 with 3 active internet connections, traffic is routed between different connections using policy routing. This is fine for outbound traffic, however inbound does not work as the traffic attempts to return via the default gateway.There seems to be no implemen...

andyyps by • Not applicable
  • 5942 Views
  • 5 replies
  • 0 Likes

Resolved! PanOS 4.0.3 - CLI options missing

HiWe seem to been missing several set options (e.g. set profiles). We recently upgraded to 4.0.3 but this is the first time I've looked to set anything like this since the upgrade.The user account I am using has full read/write access.Are we hitting a bug?RegardsJim

martji by • Not applicable
  • 4886 Views
  • 6 replies
  • 0 Likes

Captive Portal - One Time Password

Hi All,Is it possible to use a 2 Factor Radius OTP solution with captive portal, I have managed to get a solution set up for the SSL VPN which once you have entered your username and password you get another screen which prompts you for the OTP which is either sms or emailed etc.However when using the same radius authentication profile on captiv...

Resolved! Dead sites issue

Hi All,I have a site that is categoried under Dead sites by birghtcloud, as well as the local-db of PaloAlto.the site ishttp://qw131.qhit.net/osehp/quote.cgi?F=template/popdetailquote&QCODE=1944&MKTN=O&mode=Iso on my URL Filtering I allowed *.qw131.qhit.net/* , mind you Dead sites is still set on block.But my assumption was PaloAlt...

Mgmt Traffic through VPN Tunnel

I have a fairly straightforward network topology for a firewall at a remote datacenter with one little catch. The PAN's revenue interfaces are an Internet interface, an internal interface, a DMZ interface, and a device management network. The catch is the PAN's MGMT interface lies on the device mangement network for which it is also the default ...

cosx by • L2 Linker
  • 3230 Views
  • 1 replies
  • 0 Likes
  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks