General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1984 Views
  • 0 replies
  • 0 Likes

VPN tunnel monitoring/alerting

When NOT using tunnel monitoring and keying off events ids for "tunnel-status-up/tunnel-status-down",  what is the best logging to alert on for tunnels going up or down?

Is it only alertable/trackable by 
( eventid eq 'ikev2-nego-ike-dpd-dn' )


Or is the

...

Sec101 by L4 Transporter
  • 464 Views
  • 1 replies
  • 0 Likes

decryption error with Anydesk

Dear Community!

 

I´m trying to use Anydesk and it only works with decryption policy disabled, somehow the predefined exclusion for Anydesk is not working.

While checking the decryption logs I can see the following error:

"tlsv1 alert insufficient se

...

Resolved! Source Address - Show ipv4

I just upgraded from a PA 500 to a PA 820 and something is throwing me for a loop.  In all of my reports and in the monitoring section under App Scope the firewall is reporting what appears to be ipv6 addresses, they are in the format of: "::678b:540

...

Screen Shot 2021-07-08 at 8.26.00 AM.png

Can ACC data really display data per user group?

Hello!

 

I´m trying to filter data, in particual user activity, by using filter "user group" however I only have the data filter by user or IP, not using the group.

 

Do you know if you can actually filter data from any widget of the ACC by using the

...

versions 10.2, 11.1, 11.2 - which is best?

of the current trains 10.2, 11.1, 11.2, which would be the best in terms of robustness and stability?  I am running PA-440 and PA-3250.  The later trains dont have any features i need over and above what is available in 10.2. 

VPN Fail Over

Dear Team,

 

We Have PA Firewall With Single ISP and Peer End Sophos FW With Dual ISP.

 

Here I need to configure VPN Fail over. What are the step i need done PA side? 

 

Regards

Karthikeyan 

Create SSL VPN on PA-500

Hello. Week ago friend of mine gave me an old PA-500 w/o license and subscrption.

Software Version6.0.2

Since I had no admin pass therefore device was factory reseted. As Internet firewall device work fine now. Do somebody know is it possible to make

...

Demong by L2 Linker
  • 4241 Views
  • 14 replies
  • 0 Likes

PA-VM LAB licensing

We would like to have the possibility to run 3 PA-VMs in a lab environment for training, testing and education purposes. We reached out to our reseller and they told us, that we have these options:

1. "normal credits" (~7000 €)

2. PAN-SOFTWARE-NGFW-L

...

janhoppe by L0 Member
  • 728 Views
  • 1 replies
  • 0 Likes
  • 24212 Posts
  • 117 Subscriptions
Top Liked Authors
Labels