General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1812 Views
  • 0 replies
  • 0 Likes

Rules applying to wrong users

IOS : 4.0.1

User ID Agent Version: 3.1.2

We have RULE1 set for USERS - A, B, and C.  They have an AV, Anti-Spyware, and Vulnerability protection.  RULE2 is for ANY other users on the network, which has its own AV, Spyware, Vulnerability profiles as wel

...

Resolved! SSL VPN Vlient 1.2.0 - invalid PaloAlto Cert

Hi PaloAlto,

please update the SSL VPN Client 1.2.0: the "Java Object Signing certificate", which seems to be compiled into the client,

is no longer valid. Atached are two screenshots.

Best Regards

Update: Fixed in 1.3.0

Downloading updates through a diffrent interface

Hi,

Is there a possibilty to download the AV signatures / Dynamic updates through one of the non-managment interfaces?

I have one interface connected to my LAN, the other one is external - in a L3 deployment.

I do not want to connect the managment inter

...

support6 by Not applicable
  • 2976 Views
  • 2 replies
  • 0 Likes

PANOS 4.0.1 - GUI Issue

Since upgrading to 4.0.1 - in the Security Policy - under Source User - if I try and change the user type it ignores what I've chosen (eg Known User to Unknown User) and default to "Any" - then won't allow me to change it at all!!! Has anyone else ex

...

fmd by L3 Networker
  • 4385 Views
  • 7 replies
  • 0 Likes

Virus False Positive ? - Winrar

I flipped on Virus Filtering today and within 5 minutes got my first potential false positive.

Any reason why it would think Winrar.exe is a Virus ?

http://www.win-rar.com/downloads//rar/wrar400.exe

It thought it was Trojan-GameThief/Win32.magania.flfe

I

...

jhickey by L3 Networker
  • 2510 Views
  • 2 replies
  • 0 Likes

Admin Ldap

Hi,

  Apologies if this has already been discussed. I post this message, because I can't find a clear answer to my questions, related to the admin access to the box via LDAP. Basically, what I can't find is the guide for setting up LDAP admin accounts

...

Resolved! Password changes

I have LDAP configuration completed on my devices running 4.0.1.  My question is can a new user with the flag set to change password on first login use the SSL vpn and login or does he have to have a password set that is not expired to login?  Does

...

cmoore50 by Not applicable
  • 2574 Views
  • 1 replies
  • 0 Likes

Resolved! Bandwidth throttle per website.

Is there a way to throttle streaming from specific websites?  We have set QOS on specific applications like HULU but are wanting to allow limited bandwidth to specific flash streaming sites while allowing full bandwidth to other sites.

D. Elton

Blue

...

delton by Not applicable
  • 3035 Views
  • 1 replies
  • 0 Likes

SSL VPN Portal Page

Hi guys,

I'm trying to set up ssl vpn on PAN. I would like to know which security policies are necessary to make the portal work.

My actual rule is:

Source Zone: untrust

Destination Zone: untrust

Source Address: any

Source User: any

Destination Address: pub

...

ajripa by Not applicable
  • 4834 Views
  • 3 replies
  • 0 Likes

Youtube video categorization.

Hi All,

Can PAN firewall do some like a apps categories?

I mean something like video categories in youtube apps. User can view certain of video but cant view other type of video ( example : computer categories videos : allow , sports categories videos

...

samsk by Not applicable
  • 2148 Views
  • 1 replies
  • 0 Likes

Resolved! Policy based forwarding for traffic filtering

I'm trying to set up a PBF rule to take all my inside traffic, filter it through a security appliance, and then continue out to the Internet.

Without the rule applied, traffic works fine.  I can hit the Internet and all is well.  With the rule enabled

...

nwallette by Not applicable
  • 7215 Views
  • 8 replies
  • 0 Likes

slow response UI on PA 4.0.x

Hi all..

UI of PAN 4.x seems to very slow compared than previous version that PAN 3.1.x.
One of prospective customer has complained about poor response.

It need 6~8 secs to when move between tabs.

And when he click another menu within same tab, it also

...

willstech by L3 Networker
  • 3567 Views
  • 3 replies
  • 0 Likes

Resolved! Delete logs and ACC monitor data

After testing out PA we wanted to remove all testing logs and data that was produced during the labbing phase.  What would be the CLI command to delete all the data without having to do a private-data-reset?  Want to keep all the current settings, bu

...

AD user mis-identification issue in PAN

I have recently deployed PAN in my organisation which has 2 domains.

I have installed 2 PAN agents -- 1 for each domain and added respective DC's to their respective PAN Agent.

URL filtering is done on the basis of User ID from AD. So when a user logs

...

u6402 by Not applicable
  • 3545 Views
  • 4 replies
  • 0 Likes

PAN Agent Over WAN issues.

Hi PA Champions,

I have had issues with high b/w utilization from PA-FW to PAN Agent over WAN links.

As such best alternate was to install a PAN Agent in remote WAN Site DC's, along with the PAN Agent

that is already installed at the Head office.

But onc

...

ta185020 by Not applicable
  • 1947 Views
  • 1 replies
  • 0 Likes
  • 24241 Posts
  • 117 Subscriptions
Top Solution Authors
Top Liked Authors
Labels