This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Gratuitous / Proxy ARP in Failover

Hi,I know that PA sends out an Gratuitous ARP in Failobver to inform the network partners that the active IF-IP has changed. But waht about the configured static NATs on the Public Network which redirects traffic to internal Servers (e.g. DMZ) ?Are there also Gratuitous ARP send out for those "Proxy Arp" Adresses?I ask this because at a customer...

Haecker by • L0 Member
  • 13042 Views
  • 5 replies
  • 0 Likes

Resolved! 4020 : Unable to Connect to Management-Int

I have the following configurtionTwo PA 4020 in HAI can connect to Primary Box over web/ssh/ping but not able to do the same.Here is my configuration on secondary box.jksyed@SV-PA-Zulu(passive)# show deviceconfig system serviceservice { disable-http no; disable-https no; disable-telnet yes; disable-ssh no; disable-icmp no; disable-snmp yes...

URL filtering

hi all,I am trying to configure Palo alto's URL filtering for allowing user to access web site like mappy. Problem is mappy make request to other web site for displaying photos and others ....Do you know if it's possible to create a rule using a criteriun like "referrer" in URL filtering ??eg: allow mappy and mappy referrerthanks in advance for ...

VinceM by • L5 Sessionator
  • 5415 Views
  • 3 replies
  • 0 Likes

SSL-VPN: Unable to receive vpn status from service

We have a problem to connect a client with Mac OSX v.10.6.6 with netconnect: Error message: Unable to receive vpn status from service.In the FW we can see that vpn client configuration is generated successfully: slvpn-config-succ SSL VPN client configuration generated. User name: test, Private IP: 172.20.60.6, Client version 1.2.0-402, Client O...

trying to export CSV getting 'Error in data download: Error in parsing xml response.'

Hi,I hope this is the right place to ask this.I've been exporting some filetered logs to look at in Excel. This was working fine for a while, but now whatever I export, the file I'm saving (e.g. exportLog.csv) just contains "Error in data download: Error in parsing xml response." and nothing else.We have a recently installed pair of PA2020's, ru...

Resolved! Problem with two ISPs and two SSL-VPN poprtals

HelloWe have PA500. It is connected to two ISPs. The requirement of moving specific traffic from LAN to one ISP, and the other taffic from LAN to the second one is easy, using policy based forwarding. But I have problem with two separate SSL-VPN potral connections. As there are two ISPs, I configured two default routings (0.0.0.0/0), to one ISP ...

question about Thermal Chamber test result and VPNC

Hello all.would somebody tell me where I can find out Thermal Chamber test result for the PA product?plus. we're not enlisted on the VPNC testing product list.do we have plan to get certify on this?http://www.vpnc.org/testing.htmlthank you very much.best regards,ByongHwa

bhlee by • Not applicable
  • 2031 Views
  • 1 replies
  • 0 Likes

About server virtualization (vmware esx) question.

Hello.When using server vitualization environment (vmware esx) can PA inspection traffic as a vm instance from internal vm servers?I checked application named vmware at PA device but guess it is only related vmware traffic for management. right?Please checke above question for me Thanks.Regards.Roh

ttongfly by • L3 Networker
  • 2516 Views
  • 1 replies
  • 0 Likes

SSL VPN Client Compatibility

We have a customer using SSLVPN for users and 3rd-party peers.A 3rd party of theirs is using the SSL VPN client. It doesn't seem to work when co-existing on a PC with other clients on it (Cisco, Checkpoint and others) but does work if it's the only client software on the PC. Can anyone confirm compatability of the PAN SSL Client with other clients.

Managing policy with Panorama - what is best practice?

We are looking at deploying multiple firewall instances managed centrally by Panorama, and would like to maintain a global baseline policy across all of them.We recognize that regional instances will have specific local policy requirements not shared globally, so we have the option of either implementing them directly on the firewall, or instead...

KGC by • L3 Networker
  • 3821 Views
  • 1 replies
  • 0 Likes

Panorama - Master device

Hi,could anyone tell me what does really mean the voice "Master Device" in device group configuration in Panorama?Unfortunately the only documentation about this says:"[...] select a masterdevice from which the user information will be retrieved from [..]What does user information mean?Thanks

Resolved! Panorama on Vmware - memory usage

Hi Guys,We have installed Wind 2008 server, with 20 GB Ram with 800 Gb HDD for Panorama.But when we configure panorama, it does not show that it can use anything more than 3.6 Gb of Ram.We have installed VM ware Server, which on Vmware site says would support up to 8 GB ram.But in our case, the Panorama cannot be modified to anything more than 3...

ta185020 by • Not applicable
  • 4403 Views
  • 2 replies
  • 0 Likes

file blocking(file types) question.

hello all.quick question.in the File Blocking -> File types, probably we don't support "txt or text" extention as a supported file types..do we have any specific reason for this?but when it comes to Data Filtering, there is "text/html" File Types that is available.would you please teach me the implict meaning of this one?thank you very much....

bhlee by • Not applicable
  • 3375 Views
  • 2 replies
  • 0 Likes
  • 24403 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks