This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

High CPU Usage on PANOS 3.1?

Upgraded our PA-500 to 3.1. It came back up around an hour ago and the CPU usage has been on a pretty consistent 65-66% ever since.I presume either this is normal, or not normal - how can I see what it's doing please?Also even now a couple of hours later almost everything in the ACC shows up as "No matching records"?It's all working i.e. traffi...

Response page for blocked FTP, SSL, etc...

Hi all,Why is there no response pages for users when application like ftp, ssl, etc.. are blocked?I have software version 3.1.1. and everything works with blocking but users don't see any info about it. Problem is, that kind of traffic is blocked at handshake and client browser is constantly sending ex. SSL Hello package.Is there something to do...

volksbank by • Not applicable
  • 4066 Views
  • 2 replies
  • 0 Likes

Web servers redundancy inside PA with PBF

Hi, is there anyway to have web servers redundancy with PBF. What I would like is to use PBF to balance the traffic between two internal servers and, of course, monitor this servers and chnge to one of this in case the other fails. I'm testing in laboratory but obviously if you put two identical rules (outside the firewall the webserves has only...

Upgraded to 3.1, URL wildcards not working

Just upgraded to 3.1.0 from 3.0.6.I had the following URL filtering profile that I used on an inbound rule with SSL decryption so that people could only connect to valid Exchange/Outlook Web Access URLs:webmail.ourdomain.co.uk/favicon.icowebmail.ourdomain.co.uk/Exchangewebmail.ourdomain.co.uk/Exchwebwebmail.ourdomain.co.uk/Microsoft-Server*webma...

SSL VPN and other options for client VPN

I'm currently using a Watchguard firewall for our remote users to connect and authenticate using built in Windows (and Mac) VPN.I have a Palo PA-500 in the Dev environment being configured to replace the Watchguard firewall, however we have come across a few problems:1. Seems to be no support to use the built in VPN client under Windows/Mac2. If...

moha by • L0 Member
  • 3825 Views
  • 1 replies
  • 0 Likes

URL Filtering Profiles - Category/Action

I'm torn even asking this question, but it seems like it might be a nice feature but at the same time possibly misused. It might also be a support nightmare when people call saying they can't get to a URL.Would you consider adding a "Block-No-Log" to the list of actions and the associated "block-no-log" response page for URL filtering? Suppose I...

jmck9999 by • L1 Bithead
  • 3741 Views
  • 1 replies
  • 0 Likes

Resolved! SSL VPN- Config ERROR PAN OS 3.1

Hi,I m trying to configure SSL VPN on PAN OS 3.1 and its giving error msg even after submitting all the necessary information.My SETUP Details:-1: SSL VPN using Tunnel Interface ( Newly Created in Trust Zone)2: External Interface IP3: Created Self Signed SSL Inbound Certificate4: Uploaded CA Certificate ( This is new in 3.1) its not mentionde in...

How to find objects and rules using CLI?

Hello,I need to know if there is any method to make research based on ip adresses or groups to find out witch rules are using it on the cli. In other words, how can i use the cli to search policies in witch an ip adresse or a group of ip adresses is used.Regards.

asia by • L3 Networker
  • 9241 Views
  • 6 replies
  • 0 Likes

Virtual Wire DMZ - Help Please

Hoping for some clarification on using Virtual Wire to inspect traffic to our DMZ please.Right now the external interface of our PAN has a public IP of 1.2.3.1/24.Its default gateway is another firewall in front of it, it's internal interface has a public IP of 1.2.3.2/24.Both of these interfaces are connected to a switch, and on that switch we ...

Unable to authenticate users on Captive Portal

Hi,We have following issue with our setup:-1: Captive Portal is set for entire network ( 192.168.1.0) and in Active Directory the group ( IT) is choosen which will be filtered or monitored. There are two users ( user1/user2) who are member of this group.Firewall Rule :==============1: Trust to Untrust Source Action...

User Information in Firewall Database Cache

1: Captive Portal is set for entire network ( 192.168.1.0) and in Active Directory the group ( IT) is choosen which will be filtered or monitored. There are two users ( user1/user2) who are member of this group.Firewall Rule :==============1: Trust to Untrust Source Action 1: ( Any known user) Allow...

PA-4000 series and agg/dual links

Hi,I'm looking to upgrade my company firewall (PA-2050) to one of the PA-4000 series to be the internet gateway for all our US sites. Anyone here is using PA-4000 with aggregate links with Cisco switches? I'm thinking to have aggregate links for both Trust and Untrust and also dual path to our two Coreswitchs for redudancy as well. I know the...

akatev by • L0 Member
  • 3021 Views
  • 1 replies
  • 0 Likes
  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks