This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Skype-Probe sessions increase dramtically when blocking skype

Hi All,Seem to be having a bit of a problem with skype-probe.I have a PA-500 in Vwire mode behind a PIX FW, the customer wishes to block Skype traffic.Observations:1. On the ACC the ammount of skype-probe traffic far exceedes any other traffic in terms of sessions2. The ammount of bytes of skype-probe traffic is roughly in relation to th...

Resolved! Create custom report for uploaded excel files

Hello,I would like to create a custom report that will list all the uploaded excel files from our internal network.From the 'Manage Custom Report' I am using the 'Data Filtering Log' Database to create the report but I cannot add a filtering expression for the file name e.g.(filename contains 'xls'). Is there a way to produce such a report?Kind ...

Resolved! Device-level configuration and "pre-staging" in Panorama?

Is there a way to pre-stage device level configurations within Panorama? I would like to build a virtual systems, virtual routers, security policy, etc. on a "dummy" object in Panorama, and then push these changes to a real firewall when I bring it online. Is this possible? This is something I am accustomed to doing in Check Point and other ve...

mgentile by • L2 Linker
  • 2806 Views
  • 1 replies
  • 0 Likes

Error trying to unlock an admin

Under Authentication Profiles on Panorama 3.1.8 I noticed one of my admins is apparently locked. When I try to unlock by clicking on the link I get the error:vsys unexpected here locked-users unexpected here authentication unexpected here show unexpected here I can't even tell which admin is locked. The auth profile is for RADIUS-based RSA token...

KGC by • L3 Networker
  • 3007 Views
  • 1 replies
  • 0 Likes

HTTPS browsing

I made a quite shocking discovery about PA and how it inspects SSL encrypted traffic. Please correct me if I'm wrong.1. To allow simple HTTPS web browsing traffic it isn't enough to allow "web-browsing" application in the policy, you must to allow "SSL" application as well, otherwise only HTTP browsing will work, but not HTTPS.2. All non-HTTP tr...

SimasK by • Not applicable
  • 10420 Views
  • 9 replies
  • 0 Likes

Resolved! TCP Timeouts

If you work with firewalls long enough you will undoubtably run into this issue. I have a webserver in the DMZ that needs to talk to the database server on the inside. The connections need to be nailed up. In otherwords, I dont want the firewalls to close any connections that it feels may be idle as this causes errors in the aplpication.So, I cl...

jickfoo by • Not applicable
  • 15483 Views
  • 8 replies
  • 0 Likes

Manually Remove PanAgent/NetConnect

Hello All,Seem I was bitten by the Java security update and a Win7 64bit OS during the installation of SSL-VPN NetConnect and PanAgent service. My computer will now no longer successfully connect to the PanAgent service and NetConnect hangs on establishing a connection. If I use Add Remove Programs to remove the application the PanAgent and PanI...

admin override an URL and set a cookie

Hello world,when using the "admin override" function, I thought that PA is seting a session cookie for the browser.Unfortunatly, it looks like, the PA is just storing the source IP.When using a proxy, all connections of the overriden page are from the same IP. Thus one guy having the right override password can enable access for *all* users of t...

botnet question

Hello team.on the firmware 4.0.1, we have botnet monitoring function.my question is to utilize the botnet feature, do I need to buy the URL filtering license and update it to up-to-date?thank youBH Lee

bhlee by • Not applicable
  • 3103 Views
  • 2 replies
  • 0 Likes

firmware 4.0.1 SFP warning message

Hello team.on the firmware 3.X, when I put the unsupported SFP to PA, it show warning message..but on the firmware 4.0.1, I don't see that warning message.."Non-qualified SFP detected on port %d: vendor '%s'; part '%s'"it means.. we're starting to support all SFP or no longer care about the SFP?thank you BH Lee

bhlee by • Not applicable
  • 2843 Views
  • 2 replies
  • 0 Likes

SQL Database Protection?

Is there any functionality within IPS/IDS or data filtering or anything in the Palo Alto that can go a little further than IPS/IDS which looks for "bad things" and that does some sort of verification/validation of SQL traffic?The sort of thing that stuff like FortiDB/Imperva claims to do I guess where it's more to do with restricting commands/ac...

Threat ID 33803 MHTML vulnerability

New to Palo Alto. Just got an alert for threat ID 33803, Microsoft Windows MHTML Protocol Handle Cross Domain Scripting Vulnerability. I looked at the packet capture, and all I see is a href specifying an mhtml URL. Is the PaloAlto signature just matching on the string mhtml in the http request packet? Does this mean I'll get an alert for every ...

cscott by • Not applicable
  • 2253 Views
  • 1 replies
  • 0 Likes

3.1.8 vs 4.0.1

So now that 3.1.8 is out after 4.0.1, does it mean that the issues 3.1.8 addresses from the 3.1.7 release are still present in the 4.0.1 release? Or are these completely separate branches with their very own "issues"?

KGC by • L3 Networker
  • 3676 Views
  • 3 replies
  • 0 Likes
  • 24381 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks