This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! PAN-OS Certificate Expirations Clarification

With all the recent certificate update requests over the past couple months, the documents have become a bit confusing. Previously the below article stated version 10.1.11-h4 was a fix but now the article (updated 2/22/24) says version 10.1.11-h5 is the fix. I recently upgraded our 820 and 3220 firewalls to 10.1.11-h4 and now I'm showing the r...

allowing MS product activation and denying web access

I have a network that I want to allow MS product activation to work but web browsing and other internet activity to be denied.I have two main security policies that apply just to this network although DNS and ntp is also allowed:The first one is an application filter that allows all applications you get when you click on "software-updates". And...

kjh by • Not applicable
  • 18641 Views
  • 3 replies
  • 0 Likes

Resolved! QoS Policing on one of interface.

I want to establish a 600Mb egress rate limit on a specific interface. Is this the correct procedure to implement and enforce the policy? Since I'm new to setting up QoS on Palo Alto devices, I would appreciate some guidance. Additionally, I'm curious if applying this QoS change will cause any service downtime. In Cisco systems, applying a servi...

JasonKu_0-1708801333211.png
JasonKu_1-1708801379846.png
Jason.Ku by • L1 Bithead
  • 1805 Views
  • 1 replies
  • 0 Likes

Resolved! VPN Global Protect Portal - two VR and one VR environments

VPN Global Protect Portal - two VR and one VR environments Hello, good afternoon. As always, thanks for the help, the support, your time and collaboration always. I tell you I have the following case, which has me very restless, since I always try to understand what and why of what I implement and configure, I do not like to leave things tha...

Metgatz by • L4 Transporter
  • 6050 Views
  • 2 replies
  • 0 Likes

Layer 2 subinterfaces w/ Vlan interface for routing.....

Say I want to connect this port to a switch downstream (trunk), with clients hanging off of switch on access ports and use vlan interfaces for routing. Switch is set to trunk allowing relevant vlans, the firewall interface is subinterfaced (layer2) with the respective tag and vlan assigned. This is not working. DHCP does not work at all. Can som...

VK9H13 by • L2 Linker
  • 2260 Views
  • 1 replies
  • 1 Likes

Resolved! SSL decryption Certificate expired

Hi Team,We have PA self signed certificate in the firewall being used for SSL Decryption, the certificate is about to expireFrom GUI we can able to renew for another one year but our concernWill it automatically replace the existing certificate in end machineOr do we need to push the new certificate to end machines to take effectOr no action req...

VishnuPS by • L3 Networker
  • 6466 Views
  • 3 replies
  • 0 Likes

GlobalProtect Version

Hi Team, We are currently running 6.0.5 GP client version, now we are planning to upgrade the version in Prisma. May i know which version is the best version as we faced few issues in 6.2.0 for different customer not sure which is the better version to go with. As the Release notes doesn't give much info on Bugs. Regards, Sanjay S

Palo Alto laboratory

Hi, I would like to create a laboratory. Where I will use Palo Alto (PA-3050). Is there any possibility to create something like a virtual machine for 10 users from this one PA? I would like 10 people to use this one at the same time. If anyone knows what is the solution to my problem, I would like to ask for an answer and to write how to do it,...

Jokurr by • L0 Member
  • 4068 Views
  • 4 replies
  • 0 Likes

SYSTEM ALERT : high : Delete Cert

HI Folks, Getting below alret from the panorama. FW: PAN-M-600-Secondary - SYSTEM ALERT : high : Delete Cert '4aba874e-912d-4967-993e-b3c24058f841 Kindly help me to know what we have to do for this high alert.Please note you are posting a public message where community members and experts can provide assistance. Sharing private information...

CyberEye by • L3 Networker
  • 3499 Views
  • 2 replies
  • 0 Likes

Beacon - E-LEarning course pop up error

Hi All, So last few days i am going through the e-learning course for PRMuA (Prisma Access) completed a number of courses and assessments sofar but today, when I completed the Security Policy and Security Profiles - however I get a warning error with the popup so the system is unable to register my activity as completed. Does not appear to be br...

Ants by • L1 Bithead
  • 2319 Views
  • 2 replies
  • 0 Likes

Generate traffic report to identify any suspicious traffic

Hi members, I would like ask if there is way to generate a traffic report for palo alto firewall to show case if the network traffic had any suspicious attack or abnormal traffic for past 1 year ? additionally i have a panorama manage the firewall , is there any use full predefinde report that can show if there is any abnormal or suspicious at...

Export Codes

Is there a direct contact to get export codes for products? I was previously given a link but my account doesn't have the privileges to see it. I urgently require the export codes for products.

db2505 by • L1 Bithead
  • 1177 Views
  • 1 replies
  • 0 Likes

Resolved! Dynamic routing - best route

Please forgive me if this is the wrong forum and this question is too basic. Generally do network devices like PA only display the best route when setup with dynamic routing ? If so, should that route go down it will recalculate next best route and display that in the route table ? With respect to route being down does PA detect that by checking...

  • 24463 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks