General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4248 Views
  • 0 replies
  • 0 Likes

SSL-VPN with Ldap

I´m trying to configure ssl-vpn to authenticate users in ldap server or locally with imported users from Ldap via PAN. The only way that I’ve successful login´s is when I create a local user in Palo Alto firewall. I´ve got connection to Ldap servers, and in system log it appears User 'xpto\administrator' failed authentication. Reason: User is no...

Resolved! Captive Portal Logout URL

When using captive portal in vwire transparent mode, the PAN device presents a custom URL for the logon page. Is there an associated URL that can be referenced to log a CP user off? This would of course only be for the source IP address of the requestor. Just curious really as a particular scenario I am testing requires a significant inactivi...

Resolved! Sawmill with PAN URL logs

Hello,has anyone integrated PAN URL logs successfully with Sawmill for detailed reporting?Would need some help on that given that we need to get browse time per user.thanks

vinesh by L2 Linker
  • 4196 Views
  • 2 replies
  • 0 Likes

license-expired

Our PA2020 has started to categorize all visited URLs as <license-expired>. Nevertheless, our URL Filter License is not expired. I configured the PA2020 to block all URLs when license is expired ... and now that´s what our PA2020 actually does: all URLs are blocked. That means that the URL Filtering License is expired ... but it is not ......

PAN OS 3.0.8 to 3.1.1 upgrade and backup file question.

Hi All,I have question regarding PAN OS. Existing i am using PAN OS 3.0.8 and PAN Agent 3.0.2..I want to upgrade to PAN OS 3.1.1 version and the model is PA-500.1. Can i use back my existing configuration from 3.0.8 firmware to load on the new firmware 3.1.3?2. Can i backup configuration on PAN Agent 3.0.2 and load it to PAN Agent 3.1.2?3. What...

jeffhooi by Not applicable
  • 3280 Views
  • 3 replies
  • 0 Likes

Security Policy for Anti-virus blocks or allows all

Hello,I've watched the video on how to setup a URL filter security policy. It shows the action selected to be allow. When I created an Anti-virus Profile I set it up to block anything on http.I then went and created the Security policy selecting that anti-virus profile. If I leave the action set to allowed, this Policy is then shown as letting a...

numberall by Not applicable
  • 4739 Views
  • 4 replies
  • 0 Likes

Resolved! Blocking fonts.

I'd like to block users from downloading any OpenType (.otf) and TrueType (.ttf) fonts. Is there any way to block them?I am running PAN OS 3.1.3 and content version 194-663.

mharding by L4 Transporter
  • 4926 Views
  • 2 replies
  • 0 Likes

Network Interface Setup

I have a rather unique issue in that one of our internal networks is still on a public set of ips. I can't switch it over at the present time, but I am having a problem figuring out how to get the PAN to work for me on this network.My current setup is as follows:Router off campus -> Sonicwall (same public ip on wan and lan and this ip is use...

PAN Application Object Request (global)

Does PAN have a method for requesting a new global application object? Not for specialized "in-house" applications - but for large universally used applications. Particularly I am looking for Commvault and BigFix as an application. If there is no formal way to request new apps - I will look at building out my own. Thanks! -mike

MGoodnow by L4 Transporter
  • 3040 Views
  • 2 replies
  • 0 Likes

Resolved! iPhone Applipedia App

Looks like the Applipedia iPhone app is crashing on launch using iOS 4. Any chance there is a fix on the way? I think I can track down a crash log if you need one.

mharding by L4 Transporter
  • 3824 Views
  • 1 replies
  • 0 Likes

PAN AGENT FLAPS

Hi,The user to ip mapping in the pan agent flaps frequently.It gets established and disconnects frequently.Any specific reason for this? There is no firewall installed in agent.

blocking parent domain n allowing child domain in URL

hi,i have specific url filter requirement,the parent domain should be blocked,but child domain should be allowed for specific users.For ex: www.apple.com should be blocked for specified users but www.apple.com/iphone should be allowed for another group of users.

  • 24359 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels