This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

cant ping out from PA 2020

hellojust setting up a PA 2020 which has a management IP configured - should this be enough to perform license key registrations/downloads?eth1/1 vwire untrusteth1/2 vwire trustwhen i telnet to device i cannot ping a public IP addressi have 1 policy from trust/any/any/any to untrust/any/any/any allowthanks for any helpS

sue_town by • Not applicable
  • 10132 Views
  • 6 replies
  • 0 Likes

Panorama policies pushed into device not appearing in restful api when querying managed devicewhen

Hi,I'm using Panorama to manage PA-2020 device. I defined a shared policy (Pre rule) and pushed it into one of the vsys.I've verifiedin the web interfacethat the rule appears correctly.However, when pulling the configuration from the device managed by Panorama via rest api the rule did not appear at all. I used the following query to do it:http...

Combination Custom IPS Signature

Hello all.quick question as to combination customer signature.would you please give me your advise please?- one of potential customer want their employee to forcely use company email server (when sending..) not thru the hotmail, gmail etc..- I found that one of web email service change their URL when it's time to 'write' the email content.e.ght...

bhlee by • Not applicable
  • 3640 Views
  • 2 replies
  • 0 Likes

Resolved! PA-500 Upgrade to 4.0.3

Hi All,I have just upgraded a PA-500 from 3.1.8 to 4.0.3 loading the 4.0.1 base first.Once the unit rebooted the "Autocom" job has been stuck at 10% for the last 30 minutes and is still running.Has anyone experienced this before, not sure if I should kill the job and recommit ?Marc

question re split tunnelling

We are installing some PA 500 firewalls at various sites within our companyeach site has 1 connection to the internet - my question is if I want to install a dynamic multipoint VPN tunnel to connect this site to the company network and all traffic will use this - apart from internet traffic which will be pushed out locally - do I need one or two...

sue_town by • Not applicable
  • 2955 Views
  • 3 replies
  • 0 Likes

Resolved! Does Palo Alto provide any protection against Dos Attacks ?

For example a basic TCP syc flooding attack. Is there a list of the type of features that are impletemted in the Palo Alto device that can be used to mitigate DoS/DDoS attacks ?If Palo Alto needs to replace the IPS and the firewall , then it is becoming a critical component in the network. I would expect DoS Mitigation an integral component of a...

Kerberos Username Format

Hi All,I've just set up Kerberos authentication and all seems to be working fine.I see you are able to use either the FQDN format of "[email protected]" or the netbios of "company\user" to login.Previously I have implimented LDAP so the user just used their nameQuestion:a) is it possible to predefine the domain so the user just enters their...

Disk space reported incorrectly in PAN-OS 4.0.1

So far we have only upgraded our Panorama to PAN-OS 4.0.1, and the first thing I noticed was that it reports available disk space incorrectly: the web interface shows pretty well the exact opposite of what is displayed via the CLI (which I believe is the correct one.)Bug?

KGC by • L3 Networker
  • 7373 Views
  • 4 replies
  • 0 Likes

Resolved! PA File Detection seems not working right

PA claims to detect several DOS and Windows executable filetypes. The following filetypes are partially not really executables, but i am wondering that PA ignores (do not show any log) the types totally. (Nevertheless some of the filetypes are potentially really harmfull).I found the following behaviour of our Palo Alto Firewall (we tested with ...

mhuels by • L3 Networker
  • 8959 Views
  • 9 replies
  • 0 Likes

Resolved! Panorama 4.0.3

I am having issues with commits that never complete and my jobs being "stuck" after I upgrade to Panorama 4.0.3. Here are th jobs I have after I reboot...Enqueued ID Type Status Result Completed--------------------------------------------------------------------------2011/06/20 16:45:43 5 report-pu...

Performance data for enabled only Antivirus and antispyware.

Hello All.I’d like to know PA2050 performance when enabled only anti-virus and anti-spyware. According to datasheet of PA2050, PA 2050 has 500 Mbps throughput with threat prevention that include IPS, Anti-virus and anti-spyware. But I don’t want to enable IPS module, i just want to enable anti-spyware and anti-virus.In other word, I don’t need ...

willstech by • L3 Networker
  • 2627 Views
  • 1 replies
  • 0 Likes

How can i display the blocked ip from the thread block.

Hi,i put some thread protection rules against HTTP Basic-Auth brute force, and SSH brute force.One of my college did entered the password many times wrong.How can i remove an IP-address from the "blocked-ips" for n sec. and how can i display the actual blocked IPs with the expiary time ?Best Regards Lukas

Issue with PAN-AGENT

Hi guys,Pan-agent is not working as it should be.When I run the statistics command, I get the following info:admin@PA-500-BBDO> show user pan-agent statisticsName IP Address Port Vsys State Users Grps IPs Activity Cnts Link Speed--------------------------------------------------------------------...

Panagent on Windows 2008

Hi,I am getting an error when I try to install pan-agent in windows 2008. The error is "Service cannot install"2008 is a domain controller and it is a 64bit, 2gb memory server and pan agent is 3.1.2 .Please advcie

Asanka by • L2 Linker
  • 2450 Views
  • 1 replies
  • 0 Likes
  • 24427 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks