General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

URL filtering

hi all,I am trying to configure Palo alto's URL filtering for allowing user to access web site like mappy. Problem is mappy make request to other web site for displaying photos and others ....Do you know if it's possible to create a rule using a criteriun like "referrer" in URL filtering ??eg: allow mappy and mappy referrerthanks in advance for ...

VinceM by L5 Sessionator
  • 5429 Views
  • 3 replies
  • 0 Likes

SSL-VPN: Unable to receive vpn status from service

We have a problem to connect a client with Mac OSX v.10.6.6 with netconnect: Error message: Unable to receive vpn status from service.In the FW we can see that vpn client configuration is generated successfully: slvpn-config-succ SSL VPN client configuration generated. User name: test, Private IP: 172.20.60.6, Client version 1.2.0-402, Client O...

trying to export CSV getting 'Error in data download: Error in parsing xml response.'

Hi,I hope this is the right place to ask this.I've been exporting some filetered logs to look at in Excel. This was working fine for a while, but now whatever I export, the file I'm saving (e.g. exportLog.csv) just contains "Error in data download: Error in parsing xml response." and nothing else.We have a recently installed pair of PA2020's, ru...

Resolved! Problem with two ISPs and two SSL-VPN poprtals

HelloWe have PA500. It is connected to two ISPs. The requirement of moving specific traffic from LAN to one ISP, and the other taffic from LAN to the second one is easy, using policy based forwarding. But I have problem with two separate SSL-VPN potral connections. As there are two ISPs, I configured two default routings (0.0.0.0/0), to one ISP ...

question about Thermal Chamber test result and VPNC

Hello all.would somebody tell me where I can find out Thermal Chamber test result for the PA product?plus. we're not enlisted on the VPNC testing product list.do we have plan to get certify on this?http://www.vpnc.org/testing.htmlthank you very much.best regards,ByongHwa

bhlee by Not applicable
  • 2044 Views
  • 1 replies
  • 0 Likes

About server virtualization (vmware esx) question.

Hello.When using server vitualization environment (vmware esx) can PA inspection traffic as a vm instance from internal vm servers?I checked application named vmware at PA device but guess it is only related vmware traffic for management. right?Please checke above question for me Thanks.Regards.Roh

ttongfly by L3 Networker
  • 2532 Views
  • 1 replies
  • 0 Likes

SSL VPN Client Compatibility

We have a customer using SSLVPN for users and 3rd-party peers.A 3rd party of theirs is using the SSL VPN client. It doesn't seem to work when co-existing on a PC with other clients on it (Cisco, Checkpoint and others) but does work if it's the only client software on the PC. Can anyone confirm compatability of the PAN SSL Client with other clients.

Managing policy with Panorama - what is best practice?

We are looking at deploying multiple firewall instances managed centrally by Panorama, and would like to maintain a global baseline policy across all of them.We recognize that regional instances will have specific local policy requirements not shared globally, so we have the option of either implementing them directly on the firewall, or instead...

KGC by L3 Networker
  • 3846 Views
  • 1 replies
  • 0 Likes

Panorama - Master device

Hi,could anyone tell me what does really mean the voice "Master Device" in device group configuration in Panorama?Unfortunately the only documentation about this says:"[...] select a masterdevice from which the user information will be retrieved from [..]What does user information mean?Thanks

Resolved! Panorama on Vmware - memory usage

Hi Guys,We have installed Wind 2008 server, with 20 GB Ram with 800 Gb HDD for Panorama.But when we configure panorama, it does not show that it can use anything more than 3.6 Gb of Ram.We have installed VM ware Server, which on Vmware site says would support up to 8 GB ram.But in our case, the Panorama cannot be modified to anything more than 3...

ta185020 by Not applicable
  • 4417 Views
  • 2 replies
  • 0 Likes

file blocking(file types) question.

hello all.quick question.in the File Blocking -> File types, probably we don't support "txt or text" extention as a supported file types..do we have any specific reason for this?but when it comes to Data Filtering, there is "text/html" File Types that is available.would you please teach me the implict meaning of this one?thank you very much....

bhlee by Not applicable
  • 3385 Views
  • 2 replies
  • 0 Likes

Captive portal not requiring password with user id

Hi,We've implemented a PA4020 box in a v-wire configuration with another jack on the box configured as an L3 in order to have captive portal functionality. The reason is that there are multiple computers that are logged in to with generic accounts, and we want to track individual users web traffic. Captive portal is being used as a redirect with...

jasbeck by Not applicable
  • 5693 Views
  • 3 replies
  • 0 Likes

Issue creating multiple DMZs with layer3 interfaces

I have an issue with getting 2 DMZs working in layer 3 mode on Palo Alto version 3.1.7.I have set up my first DMZ and can communicate perfectly with the internal network. When I setup a second dmz (using completely different interface ports), but exactly the same configuration I cannot communicate from the internal network to the new dmz. Funnil...

ailfionn by L0 Member
  • 4085 Views
  • 4 replies
  • 0 Likes
  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
Labels