General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

 

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

jforsythe by Community Team Member
  • 300 Views
  • 0 replies
  • 0 Likes

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 3644 Views
  • 2 replies
  • 14 Likes

Recommendation Version PA-5220

Hello Everyone!

I want to ask about recommendation version for my PAN-OS.
Now, my PAN-OS using version 10.1.5-h1, type Palo Alto-5220.

Can anyone give me a recommendation to upgrade my PAN OS?

Block IE

Will blocking Internet Explorer from internet access also block MS Edge in IE mode?  If so, is there a way to allow Edge in IE mode but still block Internet Explorer?

alowranc by L0 Member
  • 1331 Views
  • 2 replies
  • 0 Likes

URL category change request rejected

Hello Community!
We need to change a URL that is tagged under Computer and Internet while it is dedicated to Health ad Medicine and should be tagged accordingly. Our vendor can't access our site as their firewall is blocking anything that is not under

...

JoseeM by L0 Member
  • 1644 Views
  • 3 replies
  • 0 Likes

Resolved! IPsec Tunnel with Loopback and NAT

Hi

 

I have 2 questions.

1. I want to create an IPSec tunnel, using a loopback interface.

This removes a dependency on the main interface ip. ie if the loopback ip is :3.4.5.2, and the main internet ip is changed from 3.4.5.1 to 3.4.5.30, this then d

...

CherieWatts_3-1662410895804.png

Secondary IPSec tunnel with Prisma Access always down.

Dear community!

 

I have a dual S2S VPN configuration with Prisma Access with static route path-monitoring as well as tunnel monitoring.

The secondary tunnel is always down, only comes up when primary goes down. Do you know if this is expected behavi

...

Carracido by L3 Networker
  • 1434 Views
  • 2 replies
  • 0 Likes

Resolved! App-ID Windows-Remote-Managment showing as Web-Browsing

We recently upgraded to 10.1.5-h1 and it appears after the upgrade the Windows-Remote-Managment traffic over tcp5985 is now being identified as Web-browsing. This is causing that traffic to drop. We checked dynamic updates and presently leveraging th

...

unable to renew device certificate

Hi everyone,

 

i'm having an issue regarding the device certificate on a pa-440 panos 10.1.6-h3

at the moment i am getting a a message  device certificate not found.

 

but u don't have any options to get a new one in the GUI.

 

is there a way to trig

...

Devicecert PA 440.jpg

Shadow Rule warning

Hello

 

When apllying a rules in PA I get the warning message re shadow rule.

I have two rules where 

 

rule 1 allows SSL between source and dest on standard SSL port 

rule 2 allows SSL between the (same) source and dest on a non standard SSL port 

 

I get a

...

RC-BHF by L2 Linker
  • 4165 Views
  • 6 replies
  • 0 Likes

no RAID menu in maint mode for 5400

Hi all,

I can't find RAID menu in maintenance mode for 5430 appliance.

It definitely was earlier (at lease in 5200 series) so I was able to copy data from old SSD to a new one.

even in the guide there is instruction for this RAID menu option (step 11

...

Unknown.jpeg
goldandy by L0 Member
  • 1242 Views
  • 2 replies
  • 0 Likes

Custom URL category issue

I have read through a number of URL category issues, but I just cannot find something like this and I am baffled so far. I have two users, inside and outside, that access a certain internal webserver. What I am trying to do is the following.

outside:

...

HIP object for Disk Encryption Criteria

Hi everyone,

Can I check for Prisma Access HIP object for Disk Encryption with BitLocker with the option to check encrypted location (eg C:, D:) is Encrypted?



Please note you are posting a public message where community members and experts can provide...

  • 24183 Posts
  • 100 Subscriptions
Top Liked Authors
Labels