General Topics

Why am I seeing not seeing the dropped packets in my traffic feed?

The way my firewall is configured, the wireless traffic gets routed to the internal traffic through it. After connecting my laptop to the wireless on our network, I am unable to reach a software that was recently implemented for some reason. I was tracing down what could've been the issue for hours. I logged into the firewall and went straight t...

Traffic not in logs but in Packet Capture

I'm having issues with my garage door opener thru my PA 220 FW, v9.1.6, with the latest dynamic updates.It uses DNS and TCP 8883 to communicate to the MyQ servers. In Monitor>Logs>Traffic, I can see DNS traffic from the opener to 8.8.8.8 with return bytes, but no other traffic. In Session Browser, I see the 8883 traffic but hitting the Int...

Resolved! logging on intra and interzone

Hello,I just turned on logging on my intra and inter zone security rules and noticed that in the security logs a few external ip addresses from zone untrust to zone untrust, with the source of a public ip being allowed, session end reason time out.How can something be allowed from zone untrust to untrust, that doesnt make sense to me?the same pu...

Some webs not working

Hi, We have a PA-3050 with PanOS 8.0.5. We cant access to these webs https://www.metromadrid.es and https://www.ing.esWe receive a timeout and we see a RST from Palo Alto to web server.We had this problem in 8.0.4 and we upgraded to 8.0.5 but the problem persists. This issue breaks my mind, can someone give me any idea???

irctc and RBI site is blocking from firewall

when i try to browse irctc and rbi webiste its got blocking from pa440 firewall. but from my aonther lan ip from ISP can access those sites.

Palo Alto loading problem

Hello All, my EC2 instance which is a paloalto firewall not loading completely. first it shows normal loading but than shows successive "process _cq did something". and does not go forward. is there anyone can help me ?

What is the RUnion region code??

My assumption is something to do with Russia, but I just can't seem to find any documentation on supporting that. Or it's something very obvious that I'm missing. 😀 Thanks

Not able to update Expedition

Hello, I'm not able to get Expedition tool to be updated, when i use the command sudo apt-get update i'm getting the following error "E: Failed to fetch https://www.rabbitmq.com/debian/dists/testing/main/binary-amd64/Packages 404 not found [IP: 104.20.10.224 443]E: Some index files failed to download. They have been ignored, or old ones us...

PA-220 Root certificate

Hi, please help me with the root certificate I have two PA-220 firewalls which I upgraded from 9.0.5 to 9.0.17-h4 and from 10.1.3 to 10.1.3-h2 Is that all or do I have to do something else? Application Version 8792-8469 (12/19/23) Threat Version 8792-8469 (12/19/23) WildFire Version 833188-837004 (12/27/23) URL Filtering Version...

authentification Global Protect with Office 365 SAML

Hi, I'm trying to use Office 365 Login to connect to my globalprotect VPN. on the configuration of my portal and gateway, I use the Microsoft User/group to assign a different configuration on "glovalprotect portal configuration, agent, USers/user Group". unable to connect. it works if I declare the users/user Group option has ALL. thank for...

No Customer ID or sales order?

I want to register my PA-850 but in the registration it asks me for No Customer ID or sales order which I do not have, how do I register my device without this information? please help.

Resolved! Support Portal Account

How long does it take to get approved after submitting request for access and what is the approval process ? Palo Alto does not provide an option to obtain support unless a case is created on Portal and no option by phone. Even with a paid support contract. Stuck until approved ?

Resolved! Security Rules using CLI

HelloI have 400 security rules, how can i find security rule using CLI?I know only IP address.

PANOS 8.1.3 Commit job was not queued. All daemons are not available.

I just update to PANOS 8.1.3 yesterday and found a error when commit the change today. The error message is 'Commit job was not queued. All daemons are not available.'. I tried reboot the firewall and the error still exists when I click on the commit. So no change can apply because it cannot commit the change. Now I rollback to 8.1.2 and it can ...

Allow Box Enterprise without allowing Box Consumer

Box is getting blocked for employees. However, more of our business partners are using Box Enterprise. We are using URL and application filtering. Looking through the list of applications, I found boxnet-enterprise-access and added it to allowed applications, but when I try to go the Box site of a Box Enterprise user/company, I'm still gettti...

Discussions

Why am I seeing not seeing the dropped packets in my traffic feed?