General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 314 Views
  • 0 replies
  • 2 Likes

GlobalProtect on a Chromebook using HIP check.

Here's something interesting that I'm running into. I have a Chromebook managed by Google Admin Center. I have GP 6.0.6-8 installed on the Chromebook. I am doing a HIP check for Host-Id. The Chromebook connects and the HIP info is verified until the

...

rnicic by L0 Member
  • 1366 Views
  • 3 replies
  • 0 Likes

Chromebook using always on, asks to install a certificate.

We are trying to connect our Chromebooks to GlobalProtect using always on. The Chrombooks are managed by The Google Admin Console. We are pushing the certificate as described by google. On connect GP askes to install a certificate. If I cancel then i

...

rnicic by L0 Member
  • 1273 Views
  • 1 replies
  • 0 Likes

The dreaded User-ID, Dynamic TAGS, XMLAPI and Multi-vsys

Hi Community, my first post so hopefully I am in the right area.

I am running a multi-vsys setup with 5220's in Active-Active HA and using XMLAPI calls from Aruba ClearPass to send login/logout info as well as tags for use in dynamic object groups. It

...

gfirth77 by L0 Member
  • 2187 Views
  • 1 replies
  • 1 Likes

Zone protection for VM series

Hi everyone,

 

I was looking for PA best practices for  VM series' zone protection but only found documents that talked about physical PA.

 

1. Are physical and VM series zone protection the same? could you point me where the docs for these are?

2. U

...

tinhnho by L2 Linker
  • 2531 Views
  • 6 replies
  • 0 Likes

SSL decryption and AppID

Today we use "ssl" AppID in firewall rules. In case we would enable SSL decryption, is it needed to add the AppIDs of the decrypted traffic to the firewall rules, e.g. web-browsing, java, flash, or is the AppID staying "ssl" even when traffic is decr

...

Anon1 by L4 Transporter
  • 10795 Views
  • 10 replies
  • 0 Likes

Resolved! Configure second DUO for PA firewall MFA

We have configured a DUO Proxy server for PA firewall MFA and it works. We also configured the second DUO proxy server for redundancy. However, we don't know how to configure PA firewall to failover to the second DUO in a case the primary DUO proxy s

...

boblin by L2 Linker
  • 5292 Views
  • 16 replies
  • 0 Likes

10.0.4.vm.eval shutting down - vmware workstation

Anyone had luck running 10.0.4 vm eval on vmware workstation?

It shuts down right after initial startup, before I get a chance to login in console.

There's more than enough CPU/RAM/Storage. Network Adapters are configured properly.

10.0.0 vm works fi

...

PanOS 11.0.1 DHCPv6 issues after reboot

Hi everyone,

 

I configured a PA440 as a DHCPv6 Client and a Fritzbox 3390 as the DHCPv6 Server (with IA_PD & IA_NA).

I also configured an inherited interface.

The configuration is the same as here: https://docs.paloaltonetworks.com/pan-os/11-0/pan-o

...

JanHend by L0 Member
  • 2032 Views
  • 2 replies
  • 0 Likes

Resolved! SSL Decryption Session is Full

Hello all, 

 

When the SSL Decryption Session is full, the customer asks how the non-decryption traffic is handled.

We need information about whether the lack of resources is causing random drops or not being affected.

The current model is VM-700, VM-3

...

  • 23658 Posts
  • 107 Subscriptions
Top Liked Authors
Labels