General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1911 Views
  • 0 replies
  • 0 Likes

IPS/IDS for SQL Server behind PAN?

We have a web server in fron of a PAN that accesses MS-SQL behind the PAN.

In the vulnerability profile that we're using, everything (client/server) is set to "default".

I appreciate it's a fairly broad question, but is this enough?

Thanks.

User-ID Agent Refresh Interval?

I'm sorry if I've just not spotted it, but is there any documentation on how often the User-ID agent (for Active Directory) updates?

We've just started to implement some policies using groups and I'm not quite clear in my mind how often the PAN checks

...

Uknown / Blank user

Hi,


I want to view the traffic for all unknown users, but I am unsure how to create this...

I thought about using (user.src neq '') but that does not work I need something similar, essentially I want to view the 'from user' that has no data in (blank)

A

...

djbisbey by Not applicable
  • 2245 Views
  • 2 replies
  • 0 Likes

URL Log

I have seen this come up in one post. Where the user has asked why the URL field is only limited to only the first 63 characters.

Any idea when this might be addressed? It is crucial to log the entire URL for both trouble shooting and forensics purpos

...

Captive Portal Question - Demo Unit

Hello everyone,

I'm currently demo'ing a unit configuring it to our projected needs.  One of the things I'm currently working on it user authentication to the net and am hoping you guys can help me out with this.  I have the captiveportal setup using

...

rjoshua by Not applicable
  • 2856 Views
  • 1 replies
  • 0 Likes

URL Filtering

This was brought up about a year ago from what I can tell but does, or will, PAN support a connector to be used with a Websense server for filtering?

cnelson by Not applicable
  • 3371 Views
  • 1 replies
  • 0 Likes

Monitoring interface traffic with SNMP

I am trying to monitor traffic on some interfaces on our PA 2050 with SNMP.

I'm using RRDtool to pull traffic counters every 5 min.

But, the interfaces in Network\Interfaces in the GUI does not match the interfaces when i do a snmpwalk IfIndex against

...

tysver by L0 Member
  • 3141 Views
  • 1 replies
  • 0 Likes

Resolved! How do PA protect a attack of mac spoof?

Dear Master.

I read that zone protection of docs and notice that PA can protect ip spoof attack using zone protection profile and uRPF. but I cannot find that protecting arp spoof attack.

How do PA protect a arp spoofinig attack?

Thank you.

ttongfly by L3 Networker
  • 4817 Views
  • 1 replies
  • 0 Likes

Resolved! Installing Intermediate Root CA?

I'm in the process of purchasing a Wildcard SSL cert and I want to install it on the PAN for a mixture of things such as:

The management interface.

The URL Override SSL certificate.

As a reverse proxy certificate.

This is the one I'm planning on getting:

...

Application Password Override

In the URL filtering configuration, there is an option to allow for an override such that a user can type in a password to override a blocked website and gain temporary access to the site.

Is there a similar function available for applications?  For e

...

rahmant by Not applicable
  • 2326 Views
  • 1 replies
  • 0 Likes

Resolved! User-ID and Windows "Run As"

Is there any way of picking up on the Palo if a User has run an application using the Windows "Run As" function?

Eg. User1 could be logged onto machine 10.1.1.1, but runs an application as Administrator.
In the logs, this shows up as user User1 (as th

...

Knowledge point redirection

Why is is that when viewing a discussion topic I get redirected to the goofy Pal Alto Networks Live page with the polling graphs?  I go into Knowledge Point, click on any discussion topic then when I click to return to go back to where I started, I a

...

cnelson by Not applicable
  • 2516 Views
  • 2 replies
  • 0 Likes
  • 24258 Posts
  • 117 Subscriptions
Top Liked Authors
Labels