This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! HA Link Monitoring.

Is there any pre-requisite to keep the interface speed and duplex to auto , auto if we are using them in HA Link Monitoring?

During our HA Test our PA interfaces are kept in duplex auto , speed 1000 setting , we have shutdown the switch interface , P

...

Sign On Error

I'm getting this error when trying to file a case in the support portal.

"Unable to provide subject and attribute info. Attribute mapping(s) failed: Mapping lookup 'getCustPortalUserfromCsp' returned empty result.

You do not have access to this resourc
...

whatok by • L0 Member
  • 3079 Views
  • 5 replies
  • 0 Likes

CLI: create admin role

Hi,

 

I'm struggling a bit to find an efficient way to create an admin role using the cli.

Let's say I want to create an admin role and grant it all rights that can be found in the "Web UI" tab when using the web interface.

 

Is there a command that basic

...

mlanterm by • L0 Member
  • 2787 Views
  • 4 replies
  • 1 Likes

Incoming Email Not Flowing

Having an issue with my deployment. Incoming email is not flowing when deploying the PA. The cloud spam filter will not connect to the spam appliance (in DMZ) I can connect to the spam appliance with the external IP address so I believe NAT is not th

...

Screen Shot 2022-07-17 at 1.15.31 PM.png
Screen Shot 2022-07-17 at 1.11.28 PM.png

Resolved! Aged Out in allowed traffic logs

Hi All,

 

I have a doubt regarding aged-out feature in palo alto firewall.

We are getting logs with allowed traffic towards different ports like port 23, 1433 etc.

The device action is allow and in reason aged-out.

 

I want to know that whether the traffic

...

ahmdsmr by • L1 Bithead
  • 194657 Views
  • 11 replies
  • 0 Likes

SDWAN Zone Mapping

Trying to make sure I understand this correctly.  For each zone to used within the SDWAN they must be mapped to the pre-defined SDWAN zones.  For the following example would this be the correct method of mapping:

 

Pre-SDWAN zones (same zones at all si

...

Resolved! Can there be fallback authentication for GlobalProtect?

I ran into a scenario that rendered me useless remotely, and I'm wondering if I can configure secondary authentication for GlobalProtect...

I used GP to VPN in remotely.  My GP is set up to authenticate through Active Directory, and it works fine.  I

...

uscit by • Not applicable
  • 3240 Views
  • 2 replies
  • 0 Likes

GlobalProtect agent download from direct URL

Hi everyone,

 

Do you know if it's possible to block the download of the globalprotect agent via the direct URL ? 

The goal here is to force users to authenticate in the portal web page to be able to download the agent.

 

Ex. for the 64bit agent :

https://

...

FabienJ by • L2 Linker
  • 8980 Views
  • 19 replies
  • 0 Likes

Resolved! Aged Out Traffic

Hi All,

Please help me on this.

If I am doing telnet from one server then telnet is working fine but in firewall I can see the traffic is aged out.
I need to know if any traffic is getting aged out, then it should not allow the traffic but how the tra

...

PPradhan by • L1 Bithead
  • 2158 Views
  • 1 replies
  • 0 Likes
  • 24197 Posts
  • 100 Subscriptions
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks