This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! dhcp restart?

I am using the dhcpd on the Palo Alto firewall, and have seen some strange relase patterns, is there away to do a shutdown/start or a restart on the daemon?

erantanen by • Not applicable
  • 12467 Views
  • 5 replies
  • 0 Likes

Palo 1410 - Inability to ping my through ISP

New to Palo Alto. Have installed a new PA 1410. This is directly attached to the Ciena 3924 device provided by the ISP. Connecting a laptop to that device allows full internet access. The external interface to access the internet on the Palo Alto is ethernet 1/6. This interface is directly connected to the Ciena 3924. It is part of an outside zo...

jlopez01 by • L0 Member
  • 2629 Views
  • 3 replies
  • 0 Likes

DNS server can't access to management interface

Hello, I don't know if this is a normal behavior or not. We have 3 DNS servers. DNS_ADNS_BDNS_CWe are not able to ping or ssh/http to the management interface from the DNS server, if this DNS server is configured as DNS server in the firewall.When we configure DNS_A and DNS_B as a primary and secondary DNS servers in the firewall, we are not abl...

Global Find search results show spinning wheel, unable to expand results after PAN-OS upgrade to 9.1.16

Does anyone know if there is a CLI command to restart, or way to rebuild, the search database? After upgrading to 9.1.16 I am unable to expand search result details for attached objects/policies, instead it hangs with a spinning wheel. Additionally, I can no long view Change Summary before committing changes (nothing happens when pressing the bu...

2023-07-21_092159.png

Resolved! Support for Open LDAP

Hi All,Does Palo Alto supports LDAP running in Linux operating systems? If yes, does the configuration is the same when using active directory?Thanks,Rex

Certification expiratio - Redistribution question.

Hi, We are not using redistribution in our FWs. We just have our PAs connected to a UIAgent. So i understand that we dont need to upgrade FWs, just install app&threats version. The point here, that PA releases a python script and its marking like redistribution is enabled. If we run the service command for redistribution its enabled but no...

BigPalo by • L4 Transporter
  • 1419 Views
  • 2 replies
  • 0 Likes

Asking about poor response time resulted in the sales team using personal attacks.

Several times now Palo Alto sales representatives have accused me of the “fact” of my unresponsiveness/unavailability being the reason for a case taking so long (it was never resolved). This concerns me greatly as I have always tried to respond in a timely fashion and be available when needed. This accusation has been used several times over the...

alberthoffpauir_0-1702680507172.png

Resolved! SNAT for multi WAN IP

Hi All, I have ISP provide 4 public IPs can be use. But I can use 1 public ip to outbound traffic only., if i create another SNAT to 2nd public IP, it can't go out to internet. e.g. Interface IP: 20.1.20.20/29 Not work NAT configuration NAT: DMZ NAT : DMZ Source IP 10.1.10.0/24 to DIPP 20.1.20.21-20.1.20.22 APP SNAT: DMZ2 Source IP : 10....

jthk215 by • L0 Member
  • 1946 Views
  • 1 replies
  • 0 Likes

Panorama Policy Push Failed

Hi Team, I am unable to push policy from Panorama to one of the firewalls. Getting the Commit Failed due to below reason. . ssl vpn cert file (CERT_GW) processing failed. (Module: rasmgr). global-protect-gateway tunnel interface (tunnel.1) in vsys (vsys1) parsing failed. (Module: rasmgr). client rasmgr phase 1 failure. Commit failed Please h...

Resolved! Windows update URLs with IP addresses show up as unknown

Hi, we have set our PA-440 (PAN-OS 10.1) to block all unknown URLs, which works amazingly well. However, I am seeing more and more URLs getting blocked which are probably for Windows updates that contain an IP address like 151.139.87.98/phf/c/doc/ph/prod5/msdownload/update/software/defu/2023/12/1024/am_delta_patch_1.403.99.0_ccea2ad383853e202858...

CPE for the Conferences or Summits

Hello, Can anyone help me how to check how many ISC2 CPEs are provided from Palo for the Summit and Conferences (like one we have recently in London Threat Management MicroSummit on 5th Dec-2023? Thank you Regards Hina

Failed to Fetch the Device Certificate

Hi Team, I facing the issue to install the device certificate. I have generated the OTP in CSP. and installed it in the panorama-managed firewall. but we are getting the below error ' Failed to fetch the device certificate.TPM public key match failed. Kindly help to resolve the issue. Please note you are posting a public message where comm...

Packet buffer protection - PA5220 vs PA5410

I've recently upgraded my firewall from a PA-5220 pair to a PA-5410 pair. The firewalls were on the same PanOS version (10.2.4-h2) and with the same configuration. This was the original configuration for PBP at the upgrade time:The 5220 wasn't logging any PBP intervention, as you can see here (there's some sporadic intervention by zone protectio...

Screenshot 2023-06-21 alle 13.32.49.png
Screenshot 2023-06-21 alle 13.14.05.jpg
Screenshot 2023-06-21 alle 13.14.44.jpg
Screenshot 2023-06-21 alle 13.47.53.png
  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks