This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! PAN Agent not seeing changes in AD

Hi,we have just become new users for the Palo Alto.I have created some additional AD OU's to help managed our URL filterting, however the PAN agent is not seeing the changes.We have tried the following:Reboot of both domain controllersrestarting of the pan agent service.Both of which have failed.Any help would be great.thanksDarren

djbisbey by • Not applicable
  • 3227 Views
  • 2 replies
  • 0 Likes

Virtual Systems in Layer 2

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin-top:0in; mso-para-margin-right:0in; mso-para-margin-bottom:10....

roshithw by • Not applicable
  • 3693 Views
  • 2 replies
  • 0 Likes

Evaluation unit- Multiple questions

Greetings,During my evaluation of a PAN device, I have found I have many questions regarding the capabilities of the device. I won't list them all in this one post but maybe just several for now. If it would be better to list these as separate posts, please let me know.1. Does the device do any sort of reverse proxying for web servers? OWA, ...

cnelson by • Not applicable
  • 3068 Views
  • 2 replies
  • 0 Likes

SSL VPN Authentication

Hi Guys,I have an issue with the SSL VPN authentication via RADIUS.I have configured the RADIUS Server with this options:Name:PANSSLAddress: 10.0.0.8Vendor Name: RADIUS StandardThe Policy and Connection Type, is as follows:Name: AccessVPNConditions: Windows User Groups, domain\domain_usersAccess Permission: Access GrantedAuthentication Method: C...

Panorama software available in seperate hardware-related versions

Hello,It is new to me. After a software refresh on the PaloAlto, the list shows more than it used to . My Panorama currently is running 3.1.1 and I like to upgrade it to 3.1.3We have PAN500 and PAN4000 boxes so i guess I have to down load 2 files, one for each type, correct?I got error when try to commit all and hope that the new updated softwar...

leole by • L2 Linker
  • 2208 Views
  • 1 replies
  • 0 Likes

Evaluating- Secondary TCP/UDP connections

Having some trouble finding a way to enable the use of secondary tcp/udp connections for a rule. For example, in our current FW I can configure a rule with a UDP primary connection with a range of ports using Receive/Send, then set it up for a UDP secondary connection with the same ports only with Send/Recieve.How can I do this in PAN?Thanks!

cnelson by • Not applicable
  • 4072 Views
  • 4 replies
  • 0 Likes

Resolved! Hard disk usage on PA series

Hi,Anyone knows the internal harddisk partitioning on PA series? Any different on those appliances? In fact, what is the size of logging info/packet info that the PA stored? Thanks!Johnny

Resolved! PA-500 work in cluster mode

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orph...

roshithw by • Not applicable
  • 3424 Views
  • 2 replies
  • 0 Likes

Resolved! Leds in failover firewall with high Availability

Hi, is it normal that in passive unit of high availability the link leds of interfaces are switch off?. the high availability it's ok and synchronized.I don't find anything about that in documentation.Thank youSamuel

High CPU usage of Panorama

Hi,Our Panorama is running on a dual quad-core 2.66GHz + 4GB RAM + VMServer 2.0. We have a PA4020 appliance which has a persistent session count of roughly 250000 sessions. When we direct the logs of this PA4020 to Panorama, the CPU usage of Panorama jumps to 100% and becomes very slow (sometimes no responses at all).So anyone knows if Panoram...

ccnetwk by • L0 Member
  • 5657 Views
  • 1 replies
  • 0 Likes

Vsys resource management

Hi Folks,We are in the process of evaluating Palo Alto. Can folks share some of their experiences on how to manage resources between Vsys? How do you manage Vsys 6 only gets x% of CPU etc...vs what other Vsys's are allowed. What is the max number of Vsys PA supports and what sort of numbers of Vsys do folks have in production...thanks,"newbie"

jsdietz by • L0 Member
  • 2823 Views
  • 1 replies
  • 0 Likes

Export "SSL VPN/SSL INBOUND Inspection Certificate" in PAN-OS 3.0.6

hi,I can't find in PAN-OS 3.0.6 solution to export CERTIFICATE.I tried WEB-admin and CLI but without solution :scp export > application Use scp to export application packet capture> application-block-page Use scp to export application block comfort page> captive-portal-text Use scp to export captive porta...

IPSEC VPN Help?

I have a PA-500 at our main office.We have a smaller site that currently we have a point to point circuit to, however we may not renew the contract on this, and instead put in a cheaper but faster internet leased line, the idea being to link the two sites through a VPN tunnel.The other site is too small to justify another PA-500, and I think "Pl...

  • 24446 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks