This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

PA implementation in vwire and L3 mode ( mixed mode )

hirecently i implemented PA-500 with basic L3 setup ( router-pa-switch ) i selected e1/1 and e1/2 as untrust and trust with basic nating, now i need to add e1/7 and e1/18 as vwire with the same external router and same external switch, the idea i have a server with direct public IP i dont need to nat it, so a cable from the router to e1/7 then c...

PBF based on Apps

Hi All,I want to PBF all my google Apps traffic via ISP1 and the rest via ISP2. Under the PBF rule -> Applications I see only a subset of Apps which includes my customs Apps too. But not all Apps from where I could choose from.Any advices please?Thanks.

actibit by • L2 Linker
  • 4029 Views
  • 2 replies
  • 1 Likes

Dual ISP for SSL VPN

I am having trouble getting SSL VPN to work on a newly added modem. Essentially, I want to add a new ISP connection to my PA and configure it to be used for SSL VPN. I tried to add a PBF rule, but apparently, pbf requires traffic to cross zones. So far, I have tried to create a loopback interface in a new zone, and make that zone the source for...

dpayne by • L1 Bithead
  • 2735 Views
  • 1 replies
  • 0 Likes

Captive Portal - Authentication Method

Hi Palo Altorian,In Captive Portal setup, does it work with Active Directory or Palo Alto Local User Database?If yes, can anyone point to me where can i find this documentation? as i was not able to find on the technical documentation. Otherwise, it would be great if someone can shed some lights on doing this.Thanking you in advance.

eugene by • Not applicable
  • 6054 Views
  • 6 replies
  • 0 Likes

Wildcard SSL

So we have a couple hosts where we use a Wildcard SSL and I noticed that in our URL filtering, it shows up as *.domain.com (application SSL) rather than service1.domain.com and service2.domain.comI've been trying to troubleshoot an issue where we use a whitelist for a certain business unit and we have service1.domain.com listed in the access URL...

Resolved! Are there detailed release notes for 3.1.7?

The PDF linked with the 3.1.7 release appears to be a copy of the release notes for 3.1.6 and not terribly useful.Is there a document that outlines the specific issues addressed by the latest release? I'm new here, so maybe I just overlooked it.Thanks!

KGC by • L3 Networker
  • 3496 Views
  • 2 replies
  • 0 Likes

Sofware updates incremental or full?

I am currently updating the sofware on a PA-4020. Are the sofware updates are incremental or full. I am currently on 3.1.3 and am going to 3.1.7. Do I need to step through the upgrades in order or can I skip to 3.1.7? Once the most current is installed is there any reason (besides fallback) to keep the old versions on the fw's drive?

Resolved! 2020 HA documentation

Can anyone point me to setup documentation for setting up HA on the 2020? I currently have 4020's in production and we are installing the smaller 2020's and they don't have the HA ports like the 4020's do.

peirce by • Not applicable
  • 2915 Views
  • 1 replies
  • 0 Likes

installing pa with isa .

hi,am going to install PA-2050 in vwire mode fron of ms-isa where its been used as cashing engine and as proxy with ntlm authentication.do i have to enable xForward on pa ? last time as i rememberd when i did the same scenario it didnt work for me

Debugging Radius server connection for captive portal

Hi,I'm using freeradius as the radius server and trying to connect it with a PA-500. (I tried to access the freeradius setup document at https://live.paloaltonetworks.com/docs/DOC-1238 but I am apparently unauthorized - do you know what level of support you need to access it?)When I try to access a website that requires captive portal, the authe...

maxxian by • L1 Bithead
  • 9655 Views
  • 7 replies
  • 0 Likes

Windows based file shares - what applications?

Hi.Can anyone tell me what applications you need to allow in a PA policy rule to allow Microsoft remote disk drive shares to be accessed?For example, I have a server in my DMZ I want to be able to access drive shares on from my inside network by simply typing\\<server>\share$I've added the followingms-ds-smbnetbios-dgnetbios-nsnetbios-ssAn...

dagibbs by • L4 Transporter
  • 10955 Views
  • 4 replies
  • 0 Likes
  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks