General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1700 Views
  • 0 replies
  • 0 Likes

Resolved! Adding management interface to OSPF via CLI

I'm doing a lab and I need to SSH to the firewalls to run some python scripts,

 

Is there a way to set OSPF to management interacee via set commands, with a management interface of 10.1.1.75?

 

I got the virtual-router default into OSPF, but I can't

...

hfakoor2 by L2 Linker
  • 1677 Views
  • 3 replies
  • 0 Likes

Resolved! Generate cookie vs Accept cookie

Hi Team,

 

Can anyone explain what Generate cookie and Accept cookie actually do? I always find myself messing with the cookie settings when enabling DUO/Azure SAML MFA but confused as to what the difference is and what they do.

 

 

Schneur_Feldman_0-1680710262228.png

Problem when SSH into a firewall

I can SSH from firewall to firewall, but when i try to SSH from a C brand router to the paloalto firewall I receive this error message:

 

 

*Sep 27 21:16:32.190: %SSH-3-NO_MATCH: No matching cipher found: client aes128-cbc server chacha20-poly1305@op

...

hfakoor2 by L2 Linker
  • 1443 Views
  • 1 replies
  • 0 Likes

Resolved! adding a default route in the CLI

trying to set a default route and getting error message

 

set network virtual-router default routing-table ip static-route default next-hop ip-address 10.1.5.9

 

 

any ideas on how to set a default route point to next hop 10.1.5.9?

 

Thanks

cisc_forum_2.png
hfakoor2 by L2 Linker
  • 5292 Views
  • 2 replies
  • 0 Likes

Resolved! Allow wildcard DNS in a Network Address

Hello all,

 

We have setup a Hybrid Connection Wizard between our on-prem Exchange server and Office 365, Microsoft has provided the following link for reference in regards to firewall considerations (https://bit.ly/3dpfiZs)

 

under SMTP port 25 - the do

...

C4c-1942 by L1 Bithead
  • 44081 Views
  • 10 replies
  • 0 Likes

Incorrect PANORAMA health MonitorStatus

Hi there,

 

Could you help me understanding of my device status correctly :

 

I was looking at my device status in PANORAMA's beautiful featrure called "Deviating devices" list. I couldn't quite understand why it is reporting some of my PA devices as dev

...

CLI commands to create a SSH profile, via the CLI?

I'm working on a Python script to change permitted-ip addresses on interfaces, uploading it to my resumé to send out. 

 

I'm fairly new to paloalto, however I'm familiar to some extent with firewalls, and familiar with routers/switches.

 

I want to c

...

hfakoor2 by L2 Linker
  • 2920 Views
  • 1 replies
  • 0 Likes

Resolved! Global Protect ( VPN client ) - does not allow print jobs

Hi everyone,

 

I need some assistance, please, if anyone else has encountered a similar issue before.

  1. I have Global Connect installed on our corporate laptops, and it successfully authenticates and provides access to our Intranet, Internet, and print
...

LIVELIFE by L1 Bithead
  • 5845 Views
  • 4 replies
  • 0 Likes

What is object auth_vpn?

 

 Set up email alert. Login When login fails.

 

 

 A related email has arrived.

 

 

I looked at the logs, but I can't find auth_vpn.

 

What is object AUTH_VPN?

 

 

qmso475_0-1695364928615.png
qmso475_1-1695365018011.png
qmso475 by L3 Networker
  • 1259 Views
  • 3 replies
  • 0 Likes

Resolved! Warning: No Valid DNS Security License

Hi Team,

 

I am using PA-3220 . We have only Thread Prevention & Wildfire License. Before Anti-Spyware -DNS Signature was using DNS-Snikhole.

 

Now we change to block we start getting Warning No Vaild DNS Security License . Do we had to buy a license as

...

NavidAlam by L3 Networker
  • 30045 Views
  • 6 replies
  • 1 Likes

Resolved! Static Port Address Translation question

This configuration issue seems like it should be very easy to figure, but I have not performed this in the past and I cannot seem to figure it out.

We will have multiple devices on the trusted network, and I need to NAT them all to a single Public IP

...

JohnSturk_0-1695407774096.png
JohnSturk_1-1695407912202.png
  • 24217 Posts
  • 117 Subscriptions
Top Liked Authors
Labels