This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

global Protect

Hi All,I tried to configure Global protect on my PA500. According to docuementation available on site, I configured Global Protect Cert Auth but If I try to create a Global Protect server cert signed by GP Cert auth, I have an error (Failed to generate certificate and key)someone can help ?Rgds

VinceM by • L5 Sessionator
  • 3693 Views
  • 2 replies
  • 0 Likes

Resolved! Reach Management Interface via SSL-VPN

Hi all,I have a little problem, I've installed a PA-500 and configured SSL-VPN, it works fine, I can reach the internal network correctly but I can't reach the management Interface.This is the scenario:VPN Clients:IP: 10.31.31.10-10.31.31.254Management Interface:IP: 10.7.10.251Gateway: 10.7.10.3The gateway already knows the routes to reach 10.31...

triitech by • L1 Bithead
  • 4256 Views
  • 3 replies
  • 0 Likes

youtube won't work with web-advertisements being blocked

Does anyone know how to get around this? We have enable web-advertisements to be blocked within our URL filering. When going to www.youtube.com and some other sites, the site is there but will not play content.Any ideas how to get the best of both worlds? Block web-ads but be able to use youtube?Thanks!

kamish by • L3 Networker
  • 14077 Views
  • 13 replies
  • 0 Likes

Palo Alto Dev Adapter for BBNA

Hi,does anybody know whether there is a working device adapter for Palo Alto Firewalls (Version 3.1.7) for integration into BBNA (BMC BladeLogic Network Automation)?If there's none, I'll probably have to write a simple adapter myself.Thanks!

Can ts-agent support xen-desktop?

Hi all.I find that PANOS 4.0.1 release note and PAN support XEN-APP6. but I could not find something about xen-desktop. I want to know that TS-agent can support xen-desktop or not. if PA can not, when will PA support xendesktop as user-id agent?Thanks.Regards.Roh.

ttongfly by • L3 Networker
  • 2260 Views
  • 1 replies
  • 0 Likes

Detecting Botnets, Virus and Vulnerabilities after migration to 4.0.1

Hi, will like to understand what other users can mention about their experience with the detection capabilities for Botnet, Virus and Vulnerabilities.We started to use a PA-500 with PAN-OS 4.0.1 with latest App,Virus and URL updates in Tap Mode but don't seem to be detecting too much.Actually, the Botnet report included to many false positves (i...

Support Palo-Alto on Opera

Hi,I'm using Opera in many cases and I have some issue with my browser as it looks like it is not supported but when using functionalities from Opera to be seen as firefox it works but sometimes fails.Can you have Opera supported pleae .I have alos issue on firefox 4.0 as I can not scroll down anymore since I've installed firefox 4.0Can you have...

4.0.1 Unable to commit error "drop-packets is unexpected"

After upgrade from 3.1.7 to 4.0.1 and while attempting to configure the botnet reports; I tried to commit and recieved this error:profiles -> spyware -> Spyware-Alert -> phone-home-detection -> custom -> 12656 -> action -> drop-packets is unexpectedI went to the offending signature and tried to change the action to the defau...

b1989j by • L1 Bithead
  • 2864 Views
  • 3 replies
  • 0 Likes

Custom App with Dynamic

If I have a custom application which uses default port as tcp/dynamic, and then on the application override policy, I define a TCP range, say 9400-9699, and configure a policy which allows this app, with service as 'application-default', what would be the net effect on permitted TCP ports?

bbivolaku by • Not applicable
  • 3069 Views
  • 1 replies
  • 0 Likes

HA synchronization failures - what would cause?

Hi.I have a pair of PA2050's in a HA configuration which run just fine - I've had successfull failover (for software upgrades) without issue.Occasionally (once a week, maybe), I notice int he High Availability section of the dashboard the section titled "Cert and Block Pages" falls out of synchronization, and I have to manually synchronize it ag...

dagibbs by • L4 Transporter
  • 4378 Views
  • 4 replies
  • 0 Likes

Resolved! IE9 breaks redirect to Case Management?

After upgrading to IE9 I can't seem to get properly redirected to the Case Management page from the general support langing page https://support.paloaltonetworks.comInstead I get redirected to a page (on htps://na5.salesforce.com site) with this error:DO NOT login from this page! Please go back to Support SiteThere is an issue with your account,...

KGC by • L3 Networker
  • 3026 Views
  • 3 replies
  • 0 Likes

Identifying applications inside ssl without decrypting

We have a large amount of ssl traffic which we would like to better break out and identify for clearer reporting. For the most part this is inbound traffic destined to our public application servers, so we know what it is without decrypting it, but it's all lumped together with other "ssl" app traffic in the reports.Can this be achieved with an ...

KGC by • L3 Networker
  • 2758 Views
  • 1 replies
  • 0 Likes

Application vs Service

I have a server that I can create a rule with Applications (e.g web-browsing, ssl), but I also need to open up specific ports (e.g udp-20). Do I need to create 2 separate rules (ie are the Application/Service fields an "and") or can I use 1 rule (Application/Service fields are "or"). Right now, I have one policy, but the traffic is still being...

bhelman by • L2 Linker
  • 3510 Views
  • 2 replies
  • 0 Likes
  • 24391 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks