This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Problem with export&push config to newly added firewall in panorama

Hello, We are trying to add new firewall to panorama . We follow the steps from the instruction for adding HA cluster to Panorama. But when we get to the step with export&push device config we get an error: Validation Error: plugins unexpected here vsys is invalid Software version of panorama and firewalls is 11.0.1-h2 We tried sev...

stef by • L2 Linker
  • 2408 Views
  • 4 replies
  • 0 Likes

GlobalProtect SAML Metadata

Hi Experts, I have configured Azure SAML SSO for GlobalProtect. When I try to export Metadata from PaloAlto FW for global-protect service, there is a mandatory section to select which virtual system. But in my case, there is no virtual system to select from. I am not sure what's the issue. Any idea what's going on? Thanks for your help in advance!

SAML metadata.PNG

Unable to connect to sysd

Hi I am trying to install PanOS 10.2.5 into Eve-ng. When i go to login i get the following error I am running 8.1 no problem and have tried multiple images. I see in some websites to ignore the error but i cant even log in. Any help would be greatly appreciated.

mzedalis_0-1697652044520.png
mzedalis by • L0 Member
  • 3926 Views
  • 1 replies
  • 0 Likes

Panorama Minimum Requirements for AWS Deployment

Hi all, I am new to Panorama management, and I am specing out a new deployment for a client. 1 - VM PA in AWS 1 - PA 440 for Office We want to manage the VM and 440 PA with Panorama. Looking at the AWS deployment documentation https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-applian...

sethcd by • L0 Member
  • 4829 Views
  • 3 replies
  • 0 Likes

Policy-Based IPsec VPN Failover

Hello everyone, I have a case, where we have configured two site-to-site VPN connections to our partner's primary and backup datacenters. Both tunnels are policy-based IPsec VPNs with Proxy-IDs configured and both use the same local/remote inner IP addresses. This is a single ISP/single virtual router environment. For example this is a sample ...

Flang3r by • L2 Linker
  • 16262 Views
  • 15 replies
  • 0 Likes

Use of HA2 and HA3 port Active-Active-Active

Hello,We have changed PA-5220(10.1.6-h6) by the PA-3420(10.2.5) , and we have detected that much more traffic is being sent by the HA2 and HA3 ports. Being unbalanced, it saturates a port of HA2 and may cause an error in the synchronization of sessions. Does anyone know how to check this or know the reason why this is happening? Thanks

Alpalo by • L4 Transporter
  • 2300 Views
  • 1 replies
  • 0 Likes

Resolved! add a name to an address object in an address group xml api paloalto

I'm trying to add an address object to an address group, but it won't let me add it. I get this error: <response status="error" code="12"><msg><line><![CDATA[ "nameAddressGroup" -> static 'nameAddressObject' is not a valid reference]]></line><line><![CDATA[ "nameAddressGroup" -> static is invalid]]&...

AlexMC by • L0 Member
  • 2237 Views
  • 2 replies
  • 0 Likes

MS RDP

Need Assistance setting up RDP access to a few devices. I would like to be able to RDP (MS) from outside to a specific IP inside. I would like to NAT the port. So I would like to, for example, RDP in from outside using our public IP using a custom port connecting internally to a private IP with the default RDP port (3389).

Resolved! Active Sessions count

Hi Team, Can we get a graph for active sessions for a weeks time? Or is there any way i can get the history of the active sessions? Regards, Sanjay S

Issue with Connection being Categorised as a Threat

For the past 5 or 6 days I've suddenly started getting a connection to a Palo GUI categorised as a threat, this worked previously without issue. When I've looked at the traffic logs it shows source and destination as correct but under the PCAP it says that the URL - 90.4.19.156 is blocked as medium risk\unknown, see below. I'm a bit flumoxed as ...

JonHill_0-1697793461251.png
JonHill by • L1 Bithead
  • 1045 Views
  • 1 replies
  • 0 Likes

Virtual Adapter problem due to WMI error from windows 10 Update

GP client having issue with virtual adapter due to a windows upgrade can be fixed by running the following commands as an administrator via the cmd prompt. cd c:\windows\system32\wbemregsvr32 /s %systemroot%\system32\scecli.dllregsvr32 /s %systemroot%\system32\userenv.dllregsvr32 cimwin32.dllmofcomp cimwin32.mofmofcomp cimwin32.mflmofcomp rso...

Resolved! Link Group and Subinterfaces

Dear all,I'm trying to set up our link monitor configuration in our 440, and I ran into an issue. Each of our physical interfaces has many subinterfaces, so the question is:If I set up a Link monitor for a physical Interface with many subinterfaces, and only one of those subinterfaces fails, does it trigger a failover? Or do all of them have to ...

mR00t_s5 by • L2 Linker
  • 2365 Views
  • 3 replies
  • 0 Likes
  • 24425 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks