General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Panorama and ESX4i

We are looking to install our Panorama 3.1.1 server on a VMWare ESX4i Server but the VM administrator as saying he is getting a "no bootable o/s" error.Does anyone know if Panorama 3.1.1 is compatible with VMWare ESX4i?Thanks in advance.

Resolved! Memory Leak in PAN 3.1?

We are evaluating a PA-500 unit that has 3.1 installed on it. It seems to have a memory leak. I just rebooted the unit because it was low on memory (30mb), when it first came up it had 288mb free memory, however after being up for a few minutes it is down to 5mb. There are only 60 active sessions at the moment since nobody is on campus. What...

How to create SSL Custom App-ID

I'm testing to create SSL custom signature from WebUI.However, we don't have enough materials to create that.Do you have any materials to create SSL custom signature?Or could you provide any sample config?Regards,Takeshi Kawai

Takeshi by Not applicable
  • 3723 Views
  • 4 replies
  • 0 Likes

Has SNMP changed with 3.1?

I pointed our network monitoring software at our PAN under 3.0.x and it detected all the interfaces and let me monitor them.Now, having upgraded to 3.1.1 I checked today and noticed it's only monitoring the eth interface assigned to the LAN/trusted zone.I did a rescan and it's seeing all the ports but it doesn't seem to recognize the external/un...

Resolved! Help needed on Inbound NAT

Hello,I need to configure a NAT from a Cisco PIX with config below to PAN. I configured NAT on PAN but the NAT doesn't seem to workPIX Config:static (inside,outside) webpublicip 172.16.10.10 netmask 255.255.255.255 0 0 static (inside,dmz) 172.16.10.10 172.16.10.10 netmask 255.255.255.255 0 0 PAN configNAT rule: Source Zone-> Outside, Des Zon...

vinesh by L2 Linker
  • 4202 Views
  • 3 replies
  • 0 Likes

Resolved! Upgrade/Import URL database manually

Hi everybody,we have some trouble to download the URL database from brightcloud.Is it possible to import the database manually.I have seen on the CLI, that we can make an scp import url-database.But where can I download the database?Kind regardsChristian

indevis by L2 Linker
  • 5267 Views
  • 3 replies
  • 0 Likes

High CPU Usage on PANOS 3.1?

Upgraded our PA-500 to 3.1. It came back up around an hour ago and the CPU usage has been on a pretty consistent 65-66% ever since.I presume either this is normal, or not normal - how can I see what it's doing please?Also even now a couple of hours later almost everything in the ACC shows up as "No matching records"?It's all working i.e. traffi...

Response page for blocked FTP, SSL, etc...

Hi all,Why is there no response pages for users when application like ftp, ssl, etc.. are blocked?I have software version 3.1.1. and everything works with blocking but users don't see any info about it. Problem is, that kind of traffic is blocked at handshake and client browser is constantly sending ex. SSL Hello package.Is there something to do...

volksbank by Not applicable
  • 4024 Views
  • 2 replies
  • 0 Likes

Web servers redundancy inside PA with PBF

Hi, is there anyway to have web servers redundancy with PBF. What I would like is to use PBF to balance the traffic between two internal servers and, of course, monitor this servers and chnge to one of this in case the other fails. I'm testing in laboratory but obviously if you put two identical rules (outside the firewall the webserves has only...

Upgraded to 3.1, URL wildcards not working

Just upgraded to 3.1.0 from 3.0.6.I had the following URL filtering profile that I used on an inbound rule with SSL decryption so that people could only connect to valid Exchange/Outlook Web Access URLs:webmail.ourdomain.co.uk/favicon.icowebmail.ourdomain.co.uk/Exchangewebmail.ourdomain.co.uk/Exchwebwebmail.ourdomain.co.uk/Microsoft-Server*webma...

SSL VPN and other options for client VPN

I'm currently using a Watchguard firewall for our remote users to connect and authenticate using built in Windows (and Mac) VPN.I have a Palo PA-500 in the Dev environment being configured to replace the Watchguard firewall, however we have come across a few problems:1. Seems to be no support to use the built in VPN client under Windows/Mac2. If...

moha by L0 Member
  • 3746 Views
  • 1 replies
  • 0 Likes
  • 24381 Posts
  • 123 Subscriptions
Top Solution Authors
Top Liked Authors
Labels