General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Panorama - The Report that wouldnt end

We bought Panorama to have a platform to run reports on that wouldnt affect the load of the firewalls. I've noticed several reports will spin for ever. No matter how long I wait (I've left it for days just for fun) the report will never end. I've also tried making the criteria smaller in an effort to reduce how much processing needs to be done. ...

jhickey by L3 Networker
  • 2739 Views
  • 3 replies
  • 0 Likes

BrightCloud URL-Filter is rubbish

We just have declared to block the category "spam-urls" on the firewall.Since then, a lot of normal german URLs is blocked wrongly. For instance www.ske.de (banking) or www.paderborn.com (official city-website).I am wondering, how a website could be a email spam category. Or do i think wrong?mfgManfred

mhuels by L3 Networker
  • 7596 Views
  • 9 replies
  • 0 Likes

Day Time Saving Issue

my Palo Alto has a time zone of Africa Cairo , in which we usually have summer time , but this year our country desided that we will not use summer time any more , But the Time is still GMT+3 in wguch it should be GMT +2 , what should i do.

Resolved! Do PAN devices support blocking Countries by IP?

In our firewall rules, we would like to be able to block access from certain countries. I know this available in several products including pfSense - http://doc.pfsense.org/index.php/Country_BlockIs this something that your devices currently support? If not, is it something planned for a future release?

nat failover ?

hi,is it possible to do a nat failover for two server e.g : one static nat from 1.1.1.1 to host_1 in case of the host is down ( link or system crash) the nat will change to host 2 instead of host_1.attached simple diagram of the iissue.

Backup IPsec tunnel to home site ASA

I have a remote site with a PA500 and two ISPs. I would like to have all the browsing traffic go out ISP2. I want an IPsec tunnel traffic to go through ISP1, unless ISP1 service goes down. The home site has an ASA, and I can put a second IP in it for redundancy, but I do not know how to configure the PAN500 side to do the fail over.

Resolved! log exports - Traffic vs Data

What is the difference between a Traffic Log vs a Data Log? I've tried searching and I'm not finding anything.Also, will the PA present any kind of error if it is unable to ftp the logs to the destination (3.1.7)? I just discovered I don't have logs for 2 months because the remote drive filled 😐

bhelman by L2 Linker
  • 2676 Views
  • 1 replies
  • 0 Likes

Resolved! Is SSL VPN support SSO with web portal?

Hi allMy customer want to sent client info ID/Password to PA’s SSL VPN from their web auth portal.They found PA always no repond after sent client ID/Password.We also try to sent it(client info) to PA web logon management from their Web auth portal but it still doesn’t work.We want to confirm the PA if support SSO(Single Sign On)and report to cu...

Resolved! Application snmp requires ldap

Since application and threads update 241-941 we get the warning:"Application 'snmp' requires 'ldap' allowed in the policy, but 'ldap' is denied in ...last rule"In my humble opinion is "snmp" udp:161 while "ldap" is tcp:389, and of course the applications behind this ports are totally different. What could be the meaning of this weird warning?gr...

mhuels by L3 Networker
  • 5878 Views
  • 7 replies
  • 0 Likes

SSL VPN and supported client

Hello allquick question. one of potential customer want install SSL VPN on their POS system. but that systems hosted on the Windows CE OS.on the manual it's look like we only support "Windows 7, Vista and Windows XP".my question is, do we support Windows CE OS?thank you very muchBH Lee

bhlee by Not applicable
  • 2818 Views
  • 2 replies
  • 0 Likes

Question about SSL-VPN Client 1.3.0

I noticed there is a new version of the SSL VPN clinet version 1.3.0Trying to find documenatation on itwhen I click on the release notes in software manager it mentions PAN OS 4.02is this a 4.02 ONLY release of the clientare there any bug fixes or improvement in the client?Need a reason to up-grade to 4.0.2 but the issues with 4.0.1 have left me...

  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
Labels