General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

User ID agent going to non- AD servers

Hi,We have a userid_agent installed on our server, our security team noticed the excessive session denies between the userid agent server going to other non-AD servers in our azure firewall, can anyone help me confirm if this traffic from our userid agent server going to non-AD servers are legit traffics?

Daryl_Cruz_1-1706767342887.png

Custom Report not able to see last month report

Hi can anyone assist me with the document how to check what went wrong with the report as we generate report last month but only appears recent logs FYI, we have done generate report monthly previously without issue . we need to know where we want to check . PAN-OS 9.1.16-h3 Thank you

Global Protect to Manage 100+ FW VPNs

Does anyone have any good redirects to information about how to manage an enterprise of PA FW's using Global Protect? I'm under the impression that Global Protect is primarily just for use of remote clients. I thought there was a way to use Global Protect to manage a large volume of FW's VPNs. Anyone have any suggestions? In the meantime, I'll b...

GlobalProtect authentication with Azure SAML question for multiple portals.

Hi All, maybe more a question for Azure, will do more research but thought in the meantime id check with the livecommunity also. so trying to find out if this is possible.. not that familiar with Azure side of things. we have 1 Panorama that manages a number of NGFWs all in their own device groups/template stacks etc. FW_A has a gp portal ca...

PA_nts by L4 Transporter
  • 2909 Views
  • 3 replies
  • 0 Likes

Resolved! Dynamic Update License

Hello There, I'm currently testing a PA feature for deployment. I need to update the dynamic updates before I upgrade the PAN-OS to the desired version. If I'm not wrong, the license is required for the offline dynamic update installation. I hope an advanced threat protection license is sufficient for offline dynamic updates.Thank You in advance

Source NAT question

hello, Is it possible to make NAT source by specifying the source port on which I appear for the remote server? let me explain : I am located in an inside zone and I would like to go to a specific zone that we will call "partner"I would like to access a server at this partner by specifying my source port 5060. (not the destination port of the ...

CAMIEG by L1 Bithead
  • 2804 Views
  • 6 replies
  • 0 Likes

Urgent Updates: PAN-OS Expired Certificates

Hi everybody, We have trying to update or upload an update for our NGFW Palo Alto 220 on the November 2023 advisory. But when we logged to our Customer Support Portal and try do all the recommendations, we had trouble in the pre-last step which says: "Select the PAN-OS version and the corresponding hotfix for your NGFWs and Panorama" where we ca...

Buzachi by L0 Member
  • 2216 Views
  • 4 replies
  • 0 Likes

Resolved! Old 4020 box running 5.x code.

Team, We have a old 4020 box running the Palo Alto 5.x code. We are looking to upgrade this to 10.x and wanted to know the best path recommended for this upgrade. Thanks! N

Resolved! NAT MGMT IP to the internet

Hi All, Before i get shot down.. yes I know this is not recommended/best practice, but was wondering if even possible as had this conversation with a colleague the other day. A client has a pair of HA PAN FWs (no panorama) as perimeter FWs Management network is setup on 192.168.1.0/24 vlan. (separate from LAN) Can you manage these FWs over t...

PA_nts by L4 Transporter
  • 9187 Views
  • 13 replies
  • 0 Likes

minemeld newbie

I have been asked to spin up minemeld on Linux, but everything I find seems quite dated. The only link I found dates back to 2017 and suggests installing on Ubuntu 14.04. Can anybody nudge me in the right direction? User's Guide · PaloAltoNetworks/minemeld Wiki · GitHub

Cortex XDR exceptions.

From the endpoint is there a way to see what exceptions are being applied? I assume I should be able to find that somewhere in the support file that is generated, but I'm not sure where in there to look. Can someone point this out to me?

JLewis12 by L0 Member
  • 904 Views
  • 1 replies
  • 0 Likes

Getting the SpeedTest.net servers with MineMeld

This is less a question needing an answer and more a "so you don't have to go through my pain" type of post. I was having a problem with SpeedTest.net where the suggestion of a server for testing was taking over a minute to appear after the rest of the page had completely loaded. With some poking about, it turned out the issue was that our fire...

RuscalR_1-1620663473061.png
RuscalR by L0 Member
  • 10571 Views
  • 2 replies
  • 1 Likes

Can't log in to Web UI

After updating my PA200, logging into the Web UI has the browser showing it's creating 'Creating an administrative session...' then it restarts with a login screen. There's only one account, and it's credentials work to log in via the CLI. Thoughts and/or suggestions? (Even if it's a pointer to 'revert to previous PANOS _and_ upload saved confi...

  • 24454 Posts
  • 125 Subscriptions
Top Solution Authors
Labels