This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! SSL-VPN Administrator or User?

Hi All,I know that the logged in account must be an administrator to successfully install the SSL-VPN client upon first login, but do all SSL-VPN sessions have to use a local administrator account to work successfully? Even after the initial client setup/installation?Thanks

4.0.2 vs 4.0.1 package update size

Hello,I noticed a good size difference in package size from .1 (276MB) to .2 (141MB). When updating from 3.x - is it recommended to start with 4.0.1 and then go to 4.0.2? Or going right to .2 is acceptable? Thanks!Mike

MGoodnow by • L4 Transporter
  • 3795 Views
  • 3 replies
  • 0 Likes

Vulnerability assessment (False Positives and Evaluation Method)

Is there a good write-up on how the vulnerability assessment is performed and how it actually works? Specifically, we had a web server set up in front of a MSSQL server -- for hosts connecting to the web server from IP segment "A" it worked fine, but hosts from segment "B" caused the creation of "HTTP SQL Injection Attempt " messages in the Thr...

bhelman by • L2 Linker
  • 2490 Views
  • 1 replies
  • 0 Likes

Source Host and Destination Name Resolution in Reports

Hello,This inconsistancy has followed the 3.x code into 4.x code for me. When I create a report and "run" - I can get source host and destination name resolution. If I export to PDF or CSV - the name resolution is replaced by the straight IP. However, if I schedule that same report to run daily - the name resolution is contained within the re...

MGoodnow by • L4 Transporter
  • 3731 Views
  • 3 replies
  • 0 Likes

Resolved! Does PA-500 supports interface grouping ?

Dears,can i assign one IP to several interfaces ( called bgroup in juniper ) or switching interface ?my scenario is i need to connect 2 server direclty to two port on PA-500 as DMZ and these interfaces will have single IP will be the gateway for both.. couldnt find the option under interfaces....

Authenticating Panorama users with AD

Is it possible to authenticate users using their AD credentials when they log into Panorama? Short of giving administrators their own login into Panorama, I'm unable to track who has changed what.I've read through the LDAP guide, but it focuses on the actual security devices and not Panorama.Has anyone done this or know if it is possible?Thanks

robert.b by • L1 Bithead
  • 5687 Views
  • 6 replies
  • 0 Likes

Resolved! Custom URL Filtering

Hi,I have a question regarding custom URL category.How can you manage it, create and so you put URL in thsi specail category.I've tried on WEB interface and I don't see how I can do that .Brgds, Lionel

More than one Syslog server - performance

Hi all,does anyone know how the configuration of more than one Syslog server in Syslog profile (to send Traffic and Threat logs) impact the performance of a PAN 2020 device?I need to send traffic and threat logs to a SIEM and a Syslog server at the same time.I saw I can configure up to 4 syslog server in the Log Profile and then add the Forwardi...

reports based on users groups ( Panorama )

Hi,can anyone confirm this is not supported yet with Panorama ?:I would like to create reports based on user groups with Panorama. I know you can achieve this with a single unit , but i don't think this will work with Panorama. We are even not able to select user/groups within security policies with the Panorama context.Best Regards,Bart

OCDBE by • L2 Linker
  • 2756 Views
  • 1 replies
  • 0 Likes

Split Tunnel

I have noticed that when I connect to the SSL VPN the Split tunnelling restriction I have in place doesn't seem to be working any longer. I recently upgraded from 3.1.6 to 3.1.8. I also upgraded my laptop client to NetConnect 1.3. When the VPN is connected and I go to www.whatismyip.com, I don't see my FW external interface address anymore but...

Resolved! block geo location

in the palo alto I have geo location data, when will I be able to write rules baised on this geolocation data?deny any traffic source or dest to canada for example

kkeeton by • L2 Linker
  • 5597 Views
  • 5 replies
  • 0 Likes

Resolved! How many Terminal Server Agents supports the PAN?

Hi everybody,I saw in the "TS_agent_install" PDF following sentence "The PAN device currently supports up to 50 TS agents." (page 5)Now my problem, one of our customers is near by this limit!So, can anyone tell me if there is an upgrade in the next release!Kind regardsChristian

indevis by • L2 Linker
  • 4205 Views
  • 3 replies
  • 0 Likes

Logging of blocked HTTP traffic

All,We have a proxy environment where LAN users requesting Internet sites have to go through the proxy. Our proxy is on the LAN side of the PaloAlto so that traffic goes from User->Proxy->PaloAlto->Internet. There is a rule on the PaloAlto that blocks any HTTP(S) traffic that hits the firewall if it doesnt come from the Proxy IP address...

Exchange 2010 CAS in the DMZ

Aside from being not supported by Microsoft, has anyone placed an Exchange 2010 CAS server in a DMZ? It looks like the reasoning behind it was because you'd have to punch so many holes in the firewall, it wasn't worth it. But since the PAN has a little more flexibility, I wouldn't think it would be a problem.

mharding by • L4 Transporter
  • 4159 Views
  • 3 replies
  • 0 Likes
  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks