General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

VPN Tunnel from remote ASA: only one of three proxy-IDs working

Has anyone had an issue where a tunnel is configured with multiple proxy-id's for a policy-based peer, but a working security association is formed for only one of them? I have a number of ASA 5505s that need to connect to my new Palo Altos from remote locations, where they mostly get dynamic, NATed, non-routable IPs. After more faffing about th...

image.png

PAN-193452 (PaloAlto 220 exceeds disk usage capacity) - Is this fixed in 10.2.3 ?

We have PA220 firewalls and regularly get the disk usage capacity error. With the help of the support team and KB instructions we can clear down space, but the message starts appearing a few days later. This is listed as a known issue (PAN-193452). Does anyone know if this is fixed in the latest release (10.2.3) and whether we are good to go a...

PA-VM maximums based on memory limits

from this url Maximum Limits Based on Memory (paloaltonetworks.com) it shows this.... Does anyone know if that 250 in yellow is correct? and if not what is it and can you point me to a more accurate document plz.

JHALL3_0-1696346288254.png
JHALL3 by L2 Linker
  • 1589 Views
  • 1 replies
  • 0 Likes

Internet Connection reset

I have a number of users that often when browsing will receive a window stating "The connection was reset" and "The connection to the server was reset while then page was loading". Anyone else experiencing this?

Networking

Hi Team, We have a customer he is using U – turn NAT. He is facing issue with DMZ server to client server.( i.e both are in same zone) He is able to access from DMZ to DMZ only that particular IP. He is not able to access remaining IPs. I have checked the session logs I am observing in the session logs. Connection is getting aged out with the...

Antivirus Signatures

Anyone knows what this new threat is? Name: Virus/Win32.WGeneric.ecphcy Unique Threat ID: 610234284 Create Time: 2023-10-03 18:19:57 (UTC) SHA256: 6bebb1b86738063e72821d2ee0018ff25e60859ec5a6093ad6d548f7e839cc62 Threat ID: 3185372 Current Release: 808871 (2023-10-03 UTC) First Release: 808871 (2023-10-03 UTC)

Monitoring Public Interface

Hi All, We are managing the HA firewall over public facing interface. Now trying to Monitor the same interface by creating the Interface Mgmt Profile and allowing SNMP. But i can ping the interface SNMP polling is not working. Is there anything else i need to configure? I can see 161 UDP is allowed on firewall. Regards, Sanjay S

Python Script For Interface ACL's, feedback

Wrote script to update interface ACL's in batch. User logs in to multiple firewalls, SSH conenctions saved in background, interface profiles are updated in a customized way per user input per firewall. Here's the Github link to the program: https://github.com/hfakoor222/Palo_Alto_Scripting There's a 2 minute video on multiple firewalls being...

hfakoor2 by L2 Linker
  • 5084 Views
  • 5 replies
  • 0 Likes

HA Panorama Active/Standby deployment - Read only access only to standby Panorama´s Server

Hi all, I have an environment with a lot of people wanting to get live traffic logs and policy rules for troubleshooting purposes, audit, etc., so we are thinking about to get all the read only admins connected only to the Standby web GUI and not to the active one and I´m not finding a way to get this done. We want to prevent this active pano...

BondonI by L0 Member
  • 1601 Views
  • 2 replies
  • 0 Likes

Using Regex in Cortex XDR XQL query

I want to extract a particular string from a particular field value from the Cortex XDR endpoint category and use it in XQL query. Is it possible to do that? For example from the below string (it is a field ) arn:aws:ec2:eu-abcd-1:123456789:instance/i-000000000000 I would like to extract the number 123456789 in an XQL query and use it to get the...

  • 24400 Posts
  • 123 Subscriptions
Top Solution Authors
Labels