General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 257 Views
  • 0 replies
  • 1 Likes

Resolved! Threat Logs: Countries with no IP

So we have 'Use X-Forwarded-For HeaderEnabled for Security Policy' enabled, and are using it policies.

The threat logs show the real Source Country but no address under X-Forwarded For IP Column. Although when exported to CSV many logs show the real

...

image.png
image.png
raji_toor by L4 Transporter
  • 1518 Views
  • 2 replies
  • 0 Likes

Avaya 9611G/4610SW VPN to PA-500

Has anyone had success connecting Avaya IP phones via VPN to PA devices?  I am able to complete IKE Phase 1 authentication, but fail Phase 2 due to local/remote proxy IDs not found:

'IKE phase-2 negotiation failed when processing proxy ID. cannot fin

...

itmanager by L1 Bithead
  • 21740 Views
  • 22 replies
  • 0 Likes

Resolved! IPSec VPN Setup for Avaya Phone

I am attempting to setup an IPSec VPN tunnel to connect to remote Avaya phones. I am not sure if I am doing it correctly. I've set up a new IPSec tunnel and configured it to use dynamic IP for remote peers. I am not sure if this is correct or not. It

...

mario11584 by L4 Transporter
  • 21541 Views
  • 16 replies
  • 0 Likes

Resolved! Slow VPN performance in >ONE< direction

Hello Community,

 

i have a strange problem regarding VPN.

 

Here is my setup:

 

HQ:

 

- PA3020 vsys2 connects to a 100/100Mbit WAN. (local, stable provider)

- Public IP is configured directly on a interface of the PA

- Speedtest from local network in HQ commi

...

Resolved! Where can I find an old Cortex macOS installer?

Hi community.

 

I need to know where I can find the installer of Cortex XDR 7.8.0.2405 for Mac because I have some devices where that old Cortex version is stuck and I can't delete it successfully. Or, if you have another method that can remove that

...

More disk on panorama in esxi for logs

is this the instructions to use to get more logging space on panorama VM running in panorama mode?

 

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-appliance/expand-log-storage-capacity-on-th

...

Resolved! Retention period for traffic logs on Panorama

Hello Experts

 

What is the rention period for traffic logs on Panorama, I mean how many days it will keep the traffic logs from firewall. Actually I need to do the harden the security rules by looking the traffic logs.

ghostrider by L4 Transporter
  • 24729 Views
  • 11 replies
  • 0 Likes

RFC1918 addresses inbound to untrust interface

I have a pair of palos in azure, they are frontheaded by a LB. I also have a VPN gateway in the gateway subnet of the vnet where these components live. Not ideal but I am trying to connect a legacy vWAN hub to a new landing zone. I have a VPN from ol

...

Resolved! Proxy ID's and routes needed?

Team,

 

If I am building a tunnel to a Policy Based device and I configure Proxy ID's do I need to add routes for the VPN as well on the Palo?

 

Or just Proxy IDs?

  • 23628 Posts
  • 107 Subscriptions
Top Liked Authors
Labels