General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 2182 Views
  • 0 replies
  • 0 Likes

Captive portal not requiring password with user id

Hi,

We've implemented a PA4020 box in a v-wire configuration with another jack on the box configured as an L3 in order to have captive portal functionality. The reason is that there are multiple computers that are logged in to with generic accounts, a

...

jasbeck by Not applicable
  • 4581 Views
  • 3 replies
  • 0 Likes

Issue creating multiple DMZs with layer3 interfaces

I have an issue with getting 2 DMZs working in layer 3 mode on Palo Alto version 3.1.7.

I have set up my first DMZ and can communicate perfectly with the internal network. When I setup a second dmz (using completely different interface ports), but exa

...

ailfionn by L0 Member
  • 3625 Views
  • 4 replies
  • 0 Likes

PAN-OS 3.17 - High Availability - Not Sync Properly

I am configuring 2 PA 2020's for a customer and am having the following problems w/the HA pair once built.  Has anyone came across this issue?

***** Text below was sent to my internal technical team *****

I have HA setup, configured and the failover ac

...

jpeadro by Not applicable
  • 5712 Views
  • 6 replies
  • 0 Likes

Response page with button continue?

Hi,

Is it possible to make in response pages the button "continue"? I want to make a response page warning that this url it's not permitted, but if the user wants to continue press this button.

Thanks

COMIP by L2 Linker
  • 2920 Views
  • 4 replies
  • 0 Likes

About Data-filter function for Korean language.

Hello


I tested Data-filter function that can recognize English character with regex.But Korean language with regex was not recognized by Date-filter function.


I think PA cannot recognize double bytes character such as Korean, Japanese and Chinese at Da

...

ttongfly by L3 Networker
  • 2496 Views
  • 2 replies
  • 0 Likes

QoS Profile Classes - Maximum Egress (Mbps)

In looking at the documentation for configuring QoS, I'm not clear on the QoS Profile Classes/Maximum Egress value.  Is this PER SESSION or TOTAL?  We're playing around with limiting (before we block it entirely) P2P traffic.  I would like to knock t

...

bhelman by L2 Linker
  • 6016 Views
  • 5 replies
  • 0 Likes

Resolved! Default Wire Policy Question

We're putting in a 4020 in Wire mode and to start I dont want to block anything. I just want traffic to pass through so I can gather stats. I am assuming my policy will be something like this:

TRUST          UNTRUST      Any     Any     Any      Accep

...

jhickey by L3 Networker
  • 3431 Views
  • 1 replies
  • 0 Likes

Resolved! Disable logging for specific users

Is it possible through rules to disable logging for specific users?  We have a child protection devision in our police dept that uses peer-to-peer and bittorrent -- which makes our threat level sky rocket.  Is there a way to prevent that traffic for

...

Regexp case sensitivity

I'm trying to create case insensitive regexp for data filtering, however couldn't find any standard regexp way which would work.

Also when I tried to workaround and created following data pattern [Vv][Ii][Dd][Ii][Nn][Ii][Aa][Mn] (which is perfectly va

...

SimasK by Not applicable
  • 4105 Views
  • 2 replies
  • 0 Likes

Scheduling PANOS command using ssh?

I'd like to have a command run on our PAN at a scheduled interval.

I know this can't be done "on-box" but I should be able to schedule a job to connect to the PAN and run the command.

I've been experimenting with plink and whilst I can make it connect

...

allow icmp type 3

Hello,

How to configure policy to deny all icmp types, but only allow icmp type 3. Is it possible at all?

Thanks!

ahtiakel by L1 Bithead
  • 3328 Views
  • 2 replies
  • 0 Likes

SSL VPN Problem

Hi All,

I'm having teething problems with our SSL VPN client.  The client installs fine on Win7-64 and XP.  I've followed the recommendations for Win7-64 and the installation all seems fine. Everything works fine when establishing the tunnel. My polic

...

  • 24253 Posts
  • 119 Subscriptions
Top Solution Authors
Top Liked Authors
Labels