General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Evaluation unit- Multiple questions

Greetings,During my evaluation of a PAN device, I have found I have many questions regarding the capabilities of the device. I won't list them all in this one post but maybe just several for now. If it would be better to list these as separate posts, please let me know.1. Does the device do any sort of reverse proxying for web servers? OWA, ...

cnelson by Not applicable
  • 3045 Views
  • 2 replies
  • 0 Likes

SSL VPN Authentication

Hi Guys,I have an issue with the SSL VPN authentication via RADIUS.I have configured the RADIUS Server with this options:Name:PANSSLAddress: 10.0.0.8Vendor Name: RADIUS StandardThe Policy and Connection Type, is as follows:Name: AccessVPNConditions: Windows User Groups, domain\domain_usersAccess Permission: Access GrantedAuthentication Method: C...

Panorama software available in seperate hardware-related versions

Hello,It is new to me. After a software refresh on the PaloAlto, the list shows more than it used to . My Panorama currently is running 3.1.1 and I like to upgrade it to 3.1.3We have PAN500 and PAN4000 boxes so i guess I have to down load 2 files, one for each type, correct?I got error when try to commit all and hope that the new updated softwar...

leole by L2 Linker
  • 2188 Views
  • 1 replies
  • 0 Likes

Evaluating- Secondary TCP/UDP connections

Having some trouble finding a way to enable the use of secondary tcp/udp connections for a rule. For example, in our current FW I can configure a rule with a UDP primary connection with a range of ports using Receive/Send, then set it up for a UDP secondary connection with the same ports only with Send/Recieve.How can I do this in PAN?Thanks!

cnelson by Not applicable
  • 4019 Views
  • 4 replies
  • 0 Likes

Resolved! Hard disk usage on PA series

Hi,Anyone knows the internal harddisk partitioning on PA series? Any different on those appliances? In fact, what is the size of logging info/packet info that the PA stored? Thanks!Johnny

Resolved! PA-500 work in cluster mode

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orph...

roshithw by Not applicable
  • 3386 Views
  • 2 replies
  • 0 Likes

Resolved! Leds in failover firewall with high Availability

Hi, is it normal that in passive unit of high availability the link leds of interfaces are switch off?. the high availability it's ok and synchronized.I don't find anything about that in documentation.Thank youSamuel

High CPU usage of Panorama

Hi,Our Panorama is running on a dual quad-core 2.66GHz + 4GB RAM + VMServer 2.0. We have a PA4020 appliance which has a persistent session count of roughly 250000 sessions. When we direct the logs of this PA4020 to Panorama, the CPU usage of Panorama jumps to 100% and becomes very slow (sometimes no responses at all).So anyone knows if Panoram...

ccnetwk by L0 Member
  • 5614 Views
  • 1 replies
  • 0 Likes

Vsys resource management

Hi Folks,We are in the process of evaluating Palo Alto. Can folks share some of their experiences on how to manage resources between Vsys? How do you manage Vsys 6 only gets x% of CPU etc...vs what other Vsys's are allowed. What is the max number of Vsys PA supports and what sort of numbers of Vsys do folks have in production...thanks,"newbie"

jsdietz by L0 Member
  • 2805 Views
  • 1 replies
  • 0 Likes

Export "SSL VPN/SSL INBOUND Inspection Certificate" in PAN-OS 3.0.6

hi,I can't find in PAN-OS 3.0.6 solution to export CERTIFICATE.I tried WEB-admin and CLI but without solution :scp export > application Use scp to export application packet capture> application-block-page Use scp to export application block comfort page> captive-portal-text Use scp to export captive porta...

IPSEC VPN Help?

I have a PA-500 at our main office.We have a smaller site that currently we have a point to point circuit to, however we may not renew the contract on this, and instead put in a cheaper but faster internet leased line, the idea being to link the two sites through a VPN tunnel.The other site is too small to justify another PA-500, and I think "Pl...

Blocking browsers ?

hi,i just need to know is it possible to block a browser e,g Firefox or Opera with application filter ? i need to implement a restricted policy to allow only IE for browsing ...appreciat any help..

u3974 by Not applicable
  • 3693 Views
  • 2 replies
  • 0 Likes

PA-500 Management NIC Dead?

Always seems to happen out of hours but... the management NIC on our PA-500 seems to have dropped off the face of the earth.I can't ping it, I can't SSH/Telnet to it, nor can I get to the web GUI.Fortunately the PAN does still appear to be passing traffic, but assuming there's no dead daemon/service that will automatically restart at some point...

  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
Labels