This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Never Stop Learning - Palo Alto Networks’ NEW Education Services Offerings

The NEW Education Services Pages have been updated to a highly interactive section on the LIVEcommunity. You can find out more about expanding your skills and knowledge through Palo Alto Networks’ world-class education and certification programs. By enabling our community members to receive up-to-the-moment and constantly refreshed educatio...

jennaqualls by • Community Team Member
  • 7283 Views
  • 3 replies
  • 2 Likes

Detect Unknowed device

There is a functioning access point TP-Link EAP225.Cannot be managed from connected devices.We know MAC Address because present on a label.Is on a unknowed subnet.But this device use gateway with Palo Alto.We don't know IP (we have try all usal IPs).We have try some porscan, verify with Wireshark but without result.I have try tu access to Paolo ...

configuration change used to be pushed to firewall

Hi Configuration change in template/stack used to be pushed to the firewall from panorama. but now after some change(creating new zone etc) made on template is pushed to the firewall, the change cannot be seen at the firewall again. so the configuration not be pushed to the firewall. Palo alto firewall is connected to panorama normally and it sh...

kevinospf_0-1694620407770.png
kevinospf by • L3 Networker
  • 4098 Views
  • 8 replies
  • 0 Likes

submit error message when remove DG

Hi Device group is created in panorama. but when I want to remove all of Device goup and submit, I got the error message. Since it is invalid command, why it cannot be removed? Please see the below. Thanks

kevinospf_0-1695089104872.png
kevinospf by • L3 Networker
  • 1202 Views
  • 1 replies
  • 0 Likes

I want to block PotatoVPN ( Threat ID 86751 )

I want to be able to block PotatoVPN Traffic. I am successful in most of my other VPN threat hunting safaris but this one is fairly new and my current rules don't capture this little guy. Has someone out there created a policy that successfully blocks potatovpn. Can I create a policy rule simply off of the identified threatID of potatovpn wh...

Resolved! VPN traffic capture

Hello, I need to capture what passes through a VPN site-to-site tunnel. I'd like to see the tunnel and not the ESP.With tcpdump you can use the command "tcpdump -i enc0" which decrypts the ESP.On Palo Alto, what is the equivalent command? Because with view-pcap follow yes filter-pcap <filename> I can only see the ESP.Thanks

Python script not working on PANos 10.2

Good Day, I currently extract custom reports for the strata firewall running PANos 9.1.x and 10.1.x using Python but I am having a problem running the same python script on PANos 10.2.x Has anybody else encountered this problem?

Lance by • L2 Linker
  • 1056 Views
  • 1 replies
  • 0 Likes

AD Groups not working in Policies

Hello all, this sounds very similar to a previous post I found on here but I could not see a resolution. Very basic. I am trying to block or allow a domain user from the internet, from LAN zone to WAN zone. This will not work if I have domain\user in the Source User Field. I can see a user when I run: admin@GeoffFirewall> show user ip-user-m...

GWynn_0-1694757547028.png
GWynn by • L3 Networker
  • 12292 Views
  • 20 replies
  • 0 Likes

Enterprise PKI Cert Chain Error

Hello we have our enterprise CA and our PA firewalls have signed certs from it. Now for our captive portal, we also have a certi signed from our enterprise CA. Everything works and there is no browser error for certificate.But in the FW commit, we get a warning "Warning: cannot find complete certificate chain for certificate ..." I found the fo...

Azure SAML authentication not Happened via GP Agent

Hi All, We have implemented the SAML two-factor authentication for Global Protect users. We have tested via browser for SAML authentication, and the page successfully redirected to the Microsoft sign-in authentication page. After signing in, the Two-Factor Verification process was initiated, and access to the global protect portal was granted ...

Resolved! ping between vyos router and pa-vm not working

Hey all. I'm starting my PCSNA journey and I've been going through CBT Nuggets and have setup the CBT Nugget lab. My 1/6 interface 23.1.2.15/24 cannot ping my vyos router ip at 23.1.2.1/24 and vice versa. I have allowed ping via the interface management on interface 1/6 which is associated to the outside zone. I have a policy allowing traffic ...

  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks