This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! QoS Question

All,I am trying to wrap my head around QoS and how it functions. What I want to do is to limit the download rate of streaming media. I understand the rule creation and placement. I assign my QoS policy to my trusted zone interface so that the download will be controlled. What I am having a hard time understanding is how this really controls ...

tohoken by • Not applicable
  • 3005 Views
  • 1 replies
  • 0 Likes

Resolved! IPS Signatures

Hi, does anyone know if PAN retires somehow the old IPS signuters?Into the update bulletin there are informations only for new and modified signatures, not for the retired ones.For example yesterday night I received the PAN bulleting and Cisco. In the PAN's email 65 new signatures were added and 14 updated. In che Cisco's 10 added/modified and 2...

zanonibs by • Not applicable
  • 4100 Views
  • 2 replies
  • 0 Likes

500-652 Antivirus Version Makes our PAN unavailable

Guys,Has anybody faced a problem regarding the latest AV version 500-652 as after installation our firewall behaves strangely (Commit failed - Down and up again - AV version mismatch)We have called support and they have told us that there is a process called tdb_compile that needs to be run after installing this AV version and this process consu...

Update PA2020 from 3.0.6

Hello all,I'm doing some maintenance work on a PA2020 and just found out that it is way out-of-date. The software release is 3.0.6 and the other updates Threat and Apps is nonexistent...What is the recommended upgrade procedure for this? I would like to take this to 3.1.8Should I export the configuration and do a factory-reset to release 3.1.8 o...

Resolved! what "session table utilization" is really mean?

Hello guys.I have question about session information of PA. PA showed session table information after command "show session info"And this command contains that information of "session table utilization" but I wonder about that information about maximum session or concurrent session?Thanks.Regards.Roh.

ttongfly by • L3 Networker
  • 3636 Views
  • 2 replies
  • 0 Likes

Resolved! About Link Aggregation

Hello guys.I tested about link aggregation for PA4060 that connected CISCO SW. but PA only connected "channel-group mode on" that mean disabled PAgP en LACP only with Cisco SW.I think PA should connected other devices using LACP (802.3ad) but result was not.So I want to know that configuration of guideline for link aggregation of PA.Thanks.Regar...

ttongfly by • L3 Networker
  • 6813 Views
  • 4 replies
  • 0 Likes

Not able to get DNS working

Hello,After visiting the forum, i have tried all options, but still the PA 500 wouldnt talk to the outside world.Source recognition under device to routing has all been checked. But there is one peculiar error whichi am getting again and again Device: Invalid IP address (NaN), but the forum said it is a bug and i verifiedif there is anything un...

nsalian by • Not applicable
  • 7258 Views
  • 4 replies
  • 0 Likes

Resolved! Palo Alto configure as access port

Hi All,It has been sometime that i haven't touch on Palo Alto device and i want to clarify whether can i configure as access port (or called as untagged port) other than normally create L3 vlan routing?I don't see such settings available on the configuration.

eugene by • Not applicable
  • 4458 Views
  • 1 replies
  • 0 Likes

Resolved! Filtering On Multiple Brightcloud Categories

I have come across a site that has been assigned three categories by Brightcloud. They are Streaming Media, Adult and Pornography, and Internet Communications, in that order. In our setup we allow Streaming Media and Internet Communications but block Adult and Pornography. It would appear that Palo Alto only looks at the first category in the Br...

shopeman by • Not applicable
  • 6593 Views
  • 6 replies
  • 0 Likes

Looking for options to control access to web site.

I've read the authentication doc, but have not found a suitable solution for limiting access to a single hosted site via the PA. Is there something I am overlooking?What I'd like to do: Host a test site, but only offer access to users we hand pick. It would be fine if we had to provide credentials of some sort to these users, but we do not wa...

JKoss by • L2 Linker
  • 2345 Views
  • 1 replies
  • 0 Likes

Resolved! Application or Service Port

Hoping someone can help me out here:I have a system that needs to ssh/sftp/http/https.I attempt to define using applications: ssh/ssl but cannot find any for http or sftp. If I search the applipedia for the port, it shows other apps that are on port 80 or 22, however, they are not listed as http or sftp.*EDIT: found app for 80 is listed as web-b...

dc_cubed by • L0 Member
  • 8110 Views
  • 2 replies
  • 0 Likes

frequently HA connection down

Hi,we have 2 PA-500 configured in active-passive mode.Since two week ago we frequntly receive na alarm about the Ha connections that goes down and then goes up.We have checked and changed the crossover cable used for the Ha interface; we have increased the parameteres for the HA checks...but the PA continue to register event like :SYSTEM ALERT :...

u4353 by • Not applicable
  • 7277 Views
  • 6 replies
  • 1 Likes

Resolved! Drive-By Protection?

We're finding that there's a small amount of drive-by stuff, typically fake AV, that's making it past the content filtering, spyware filtering, and antivirus filtering in our Pan running 3.1.8.Are there any non-default settings that are recommended as, tbh, the antivirus/anti-spyware feature hardly ever seems to catch anything?Also I believe the...

Resolved! UI Functionality - Simultaneous Edits

When you are editing your policies you can select multiple rows and use the functions at the bottom. However, in my experience, if you click on a setting, such as profiles, it lets you edit just the one attribute even though you have several rows selected. We would like the ability to select rows and make modifications to all of them at the s...

dc_cubed by • L0 Member
  • 2941 Views
  • 1 replies
  • 0 Likes

URL Filtering Activation

Hi,URL Filtering Activation.I have activated the URL Filtering Lic, but still when I click on Objects > URL Filteringit shows me " License required for URL Filtering to function "Also when I go into devices, and Licensing, i see the following.Date IssuedNovember 04, 2010 Date ExpiresNovember 04, 2011 DescriptionBrightCloud URL Filtering Activ...

ta185020 by • Not applicable
  • 6801 Views
  • 9 replies
  • 0 Likes
  • 24380 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks