General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Performance Problems

Hi everybody,PA-500Software: 3.0.5We have different customers with an PA-500 implementation.Two of those customers have an 100 Mbit connection, and theycomplain about performance issues.The Firewalls are configured in VirtualWire Mode, we have configured 3 Vwires.The Firewall rules are on any allow, and there are no security profiles configured....

indevis by L2 Linker
  • 4630 Views
  • 2 replies
  • 0 Likes

Resolved! Possible bug in ACC PANOS 3.0.5 - PA-500

When I click on the ACC tab it loads the ACC with the chartsApplicationURL FilterThreat PreventionData FilteringIf I click on 'web-browsing' or anything else that creates a filtered view and then close that element to go abck to a non filtered view ACC loads with a whole different set of charts:Top ApplicationsTop SourcesTop DestinationsTop Sour...

Resolved! Schedule and montly recurrence

I would like to perform a montly report, but in the scheduled page I can only choose between daily and weekly scheduling. I can do something on the CLI ?Thanks Boris

asecus by Not applicable
  • 3427 Views
  • 1 replies
  • 0 Likes

Resolved! Captive Portal - fail to redirect another page upon authenticated

Hi All,I just managed to configure Palto Alto PA-500 captive portal to work with windows 2003 radius server i.e integrate with Active Directory. Based from the event viewer and log stated inside palo alto, the session was shown authenticated but somehow, upon authenticated at the user captive portal page... it will still show captive portal page...

eugene by Not applicable
  • 4363 Views
  • 2 replies
  • 0 Likes

Dynamic VPN

Dear PaloAlto Support,Does Palo Alto support this VPN feature such as Dynamic VPN or Easy VPN? Customer will use Cisco Router at their branches. They want to connect VPN from all branches to their HQ. All branches will have dynamic IP and HQ will have static IP.Thanks,

Ovan by Not applicable
  • 4492 Views
  • 3 replies
  • 0 Likes

Resolved! session flags

I can't find documentation about connection Flags in command show session all-------------------------------------------------------------------------------ID/vsys application state type flag src[sport]/zone/proto (translated IP[port]) dst[dport]/zone (translated IP[port]I can see nothing, N...

Resolved! Is there a Bug in the URL filtering profiles

Hi everybody,PA-500Software: 3.0.5Threat-Apps: 163-489URL Filter: 3243I have a question to the URL filtering profiles.When we add URLs to the block or allow list,and make a commit the listed URLs were not blocked or allowed.We need a second step, we open the URL profile againand change any category we want, only one is necessary!Then we make ano...

indevis by L2 Linker
  • 4636 Views
  • 1 replies
  • 0 Likes

Resolved! User Agent System Requirements

We're running into issues with the Palo Alto User Agent. It'll run for a few days, then we'll stop getting user information. When I look at the server running the agent, and try to start the agent, I get a message along the lines of "The paging file is too small for this operation to complete." We have a dedicated page file volume that's 4GB,...

Virtual-Wire connectivity during reboot

Hi all,I know some IDS/IPS are able to keep the network connectivity during a reboot. Then it does not stop the trafic.Does the PA able to do the same in Virtual-Wire mode ? Or in other mode ?The aim is to upgrade the appliance in a production environment.Regards,Olivier

olev by Not applicable
  • 4604 Views
  • 2 replies
  • 0 Likes

QoS data in logs

Hello PAN,Is there any way to obtain QoS data from the PAN logs other than doing a "show session id" CLI command in the current release 3.0.5? My customer would like to be able to see how much traffic is hitting the QoS classes and which traffic is hitting the QoS classes.Thanks

jwolach by L4 Transporter
  • 3534 Views
  • 1 replies
  • 0 Likes

Resolved! sample logs of licenses expiration

Hello,Could you give me the sample logs that the PA log before the following licenses expira ? - Support - URL Filtering - VSYS upgradeWe have the log of threat prevention license: - License for feature threat will expire on 2009/12/11Regards,

Defining Policies, Profiles, etc via CLI

Our primary interface with devices and management systems is through the CLI. Essentially, what I need is a guide that explains the syntax and how to create/update/delete policies, security profiles, etc via CLI. (Neither the CLI Reference nor the Administrator's Guide seem to contain the information.)

Troubleshooting PAN-Agent connectivity

Hello, I have PAN OS 3.0.5 installed on a cluster (active passive)The passive device seams to have problem to contact PANAs you can see from ommand below 10.44.36.125 Agent can't be reached (on active is ok) st1\:*{behavior:url(#ieooui) } /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Tabella normale"; mso-tstyle-rowband...

Log files meaning

Hello,With command tail I can read log from PAN FW. ...questions :what's difference between mp-log and dp-log ?what does the mp-log files below contain/mean (i.e ha_agent.log is for ha system) ?appWeb.log.old masterd_manager-infra.logbrdagent.log mgmt_fb.logcaptive_portal.log mp-monitor.logchasd.log ...

Resolved! Pan Agent Expire setting

Hi,I see in the logfile the information :2010 01 04 10:07:25, ########################### Start Pan-Agent #############################2010 01 04 10:07:25, Add Domain: ce2010 01 04 10:07:25, Num. of Threads: 402010 01 04 10:07:25, GroupMemebers cache flag is 1.2010 01 04 10:07:25, Add DNS-style Domain: xxxxx.com2010 01 04 10:07:25, Add NetBIOS D...

u2343 by Not applicable
  • 5676 Views
  • 3 replies
  • 0 Likes
  • 24381 Posts
  • 123 Subscriptions
Top Solution Authors
Top Liked Authors
Labels