This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Multiple NAT or UTurn NAT rules

We are hoping that someone can suggest a simpler way to resolve the issue of allowing internal hosts (in the Trust zone) to access servers sitting on the Trust zone via their external IP address (what PAN calls a UTurn or Hairpin rule). We have nearly 70 Static IP NAT rules, most of which are bidirectional, and are not looking forward to defini...

synapse by • L0 Member
  • 4054 Views
  • 2 replies
  • 0 Likes

Resolved! Opening file download for specific URLs

I have recently deployed PAN 2050 in my organization. We are enabled file blocking for selected file types e.g. (EXE, BAT, CAB, ZIP, ISO, RAR etc.) in both the direction. But as per management decision I have to allow download access from Microsoft URL’s. As you are aware Microsoft is having hundreds of IP’s so I can’t achieve this using IP addr...

u6402 by • Not applicable
  • 2807 Views
  • 1 replies
  • 0 Likes

DOCX, XLSX, PPTX, ASPX files to be allowed when zip is blocked

I have recently deployed PAN 2050 in my organization. We are enabled file blocking for selected file types e.g. (EXE, BAT, CAB, ZIP, ISO, RAR etc.) in both the direction. Currently we are facing some issues with DOCX, XLSX, PPTX, ASPX file types. Even though this file types are allowed PAN is detecting these files as ZIP files and it is getting ...

u6402 by • Not applicable
  • 4982 Views
  • 1 replies
  • 0 Likes

PAN-2020 is taking 45 Minutes to 1 Hour for committing the changes

I have recently deployed PAN 2020 in my organization. Initially it was working fine without any major issues. But recently it started behave strangely. PAN is taking 45 Minutes to 1 Hour for committing the changes. Sometimes it may even get timeout as well. Restarting PAN device is resolving issue temporarily. Did anyone face this issue before? ...

u6402 by • Not applicable
  • 2655 Views
  • 2 replies
  • 0 Likes

Resolved! PANOS 4.0.1 - Color Scheme Hard to Read

Does anyone else find that the color scheming of PANOS 4.0.1 extremely hard to read?Since upgrading recently I've had multiple complaints specifically with reading of the 'greyed-out' areas such as disabled rules, the soft contrasting and color choices are terrible to read.Is there any way to change this to something with more contrast?

micit by • L1 Bithead
  • 2728 Views
  • 1 replies
  • 0 Likes

Packet Capture problem w/ PA-5020 running 4.0.0

So, using debug dataplane packet-diag I am unable to get filters to work propperly and quite often don't see data that I actually Should. I didn't know if this was a bug with the 4.0.0 code or not but it makes it awful hard to defend the firewall when I can't produce reliable output from either logs or packet captures. The settings I have are ...

Virus only email alerts?

I see where it is possible to send alerts for threat preventation at the different severity levels, but is it possible to only send alerts for a specific type? Specifically i'd only like to receive emails for Virus alerts.

chrisp by • L3 Networker
  • 3180 Views
  • 2 replies
  • 0 Likes

Rules applying to wrong users

IOS : 4.0.1User ID Agent Version: 3.1.2We have RULE1 set for USERS - A, B, and C. They have an AV, Anti-Spyware, and Vulnerability protection. RULE2 is for ANY other users on the network, which has its own AV, Spyware, Vulnerability profiles as well as a URL Filter.Users associated with RULE1 will randomly be applied to a URL filter, when they...

Resolved! SSL VPN Vlient 1.2.0 - invalid PaloAlto Cert

Hi PaloAlto,please update the SSL VPN Client 1.2.0: the "Java Object Signing certificate", which seems to be compiled into the client,is no longer valid. Atached are two screenshots.Best RegardsUpdate: Fixed in 1.3.0

Downloading updates through a diffrent interface

Hi,Is there a possibilty to download the AV signatures / Dynamic updates through one of the non-managment interfaces?I have one interface connected to my LAN, the other one is external - in a L3 deployment.I do not want to connect the managment interface at all, but use the existing ones.Thanks, Roy.

support6 by • Not applicable
  • 3425 Views
  • 2 replies
  • 0 Likes

PANOS 4.0.1 - GUI Issue

Since upgrading to 4.0.1 - in the Security Policy - under Source User - if I try and change the user type it ignores what I've chosen (eg Known User to Unknown User) and default to "Any" - then won't allow me to change it at all!!! Has anyone else experienced this?Also as other people have stated - the GUI seems much slower and creating things l...

fmd by • L3 Networker
  • 5071 Views
  • 7 replies
  • 0 Likes

Virus False Positive ? - Winrar

I flipped on Virus Filtering today and within 5 minutes got my first potential false positive.Any reason why it would think Winrar.exe is a Virus ?http://www.win-rar.com/downloads//rar/wrar400.exeIt thought it was Trojan-GameThief/Win32.magania.flfeI immediate shut off virus filtering. I cant be dealing with tons of false positives. Unless this ...

jhickey by • L3 Networker
  • 3148 Views
  • 2 replies
  • 0 Likes

Admin Ldap

Hi, Apologies if this has already been discussed. I post this message, because I can't find a clear answer to my questions, related to the admin access to the box via LDAP. Basically, what I can't find is the guide for setting up LDAP admin accounts.- Version used: 3.1.8.- Motivation: use of LDAP so that password policy is managed at the AD lev...

Resolved! Password changes

I have LDAP configuration completed on my devices running 4.0.1. My question is can a new user with the flag set to change password on first login use the SSL vpn and login or does he have to have a password set that is not expired to login? Does the PA allow a user to change his password in LDAP if it is expired?Thanks

cmoore50 by • Not applicable
  • 2849 Views
  • 1 replies
  • 0 Likes

Resolved! Bandwidth throttle per website.

Is there a way to throttle streaming from specific websites? We have set QOS on specific applications like HULU but are wanting to allow limited bandwidth to specific flash streaming sites while allowing full bandwidth to other sites. D. EltonBlue Springs R4 School District

delton by • Not applicable
  • 3353 Views
  • 1 replies
  • 0 Likes
  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks