General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Log Forwarding - multiple instances of same catgory?

In Log Forwarding Profile I have URL Filtering/All Logs going to a log collection server. 
But for URLs of a phishing category I want those to be emailed. I tried to do this by 

creating a second profile match list profile URL Filtering/phishing. But

...

Admin credentials were not changing

Hi
We have 2 PA-850
They are working in HA mode

When i got the handover they gave the admin credentials

The secondary was always active
When i tried to login to the passive one the admin password did't work

At the end i logged in with the initial password

...

Questions) Missing Panorama Log

When creating the Security Policy Rule, 'Log at Session Start/End' was all selected as Actions.

After this, when I check the log in Panorama, only the End Log is visible and the Start Log is not visible.
Also, sometimes this logs are not visible.

 

I

...

Policy Actions.png
future by L1 Bithead
  • 1826 Views
  • 3 replies
  • 0 Likes

SAML Jumpcloud HA Implementation

Hi,

 

i follow the docs here LIVEcommunity - PAN-OS SAML SSO with JumpCloud and Mobile Push MFA - LIVEcommunity - 493684 (paloaltonetworks.com)

it works well with one firewall. When it used to HA active Passive Environtment, it wont work on the passive,

...

URL Filtering Wildard - ? in URL

I have inbound decryption set up for a server and we want to restrict what URLs users can get to.  The website admin tells me that ALL links to the site will contain something similar to the following:

 

https://my.web.server/xxx/yyy/zzz/TEXT_SOMETHING

...

RCurrie by L0 Member
  • 1636 Views
  • 2 replies
  • 0 Likes

Session end reason=resources-unavailable, version 8.1.15.h3

In the traffic log we have found some entries with a session end reason=resources-unavailable, version 8.1.15.h3, however PAN-189468 is not affecting our version only affects version: 

 

9.1.0-9.1.13
10.0-10.0.10
10.1.0-10.1.4

 

adm_(active)> debug datapla

...

Alpalo by L4 Transporter
  • 1792 Views
  • 1 replies
  • 0 Likes

Client certificate for syslog is failing

Im trying to setup a syslog forward from a loggcollector with tls, i get this error in the syslog log on the collector.

 

Certificate subject does not match configured hostname; hostname='scrubbed', certificate='blah.blah.com'


However the certificate ha

...

hbalzac by L3 Networker
  • 2851 Views
  • 1 replies
  • 0 Likes

Technical Specs of M-200

Hi Guys,

Anybody here what is the default RAM and CPU number of a M-200 Panorama server? I've checked the guides and data sheet but I can only see the VM version.

Thanks in advance.

 

Nikko by L1 Bithead
  • 3762 Views
  • 5 replies
  • 0 Likes

Palo Alto CloudGenix Support

This is terrible!!  The second time, in the last week, I'm in need of urgent assistance (the whole office is down) and I'm unable to get anyone's phone quickly enough!  First time I was waiting for 2 hrs. on the phone before finally, I got someone to

...

Resolved! Interface states in PAN

Hi Team ,

I have query regarding below . Physical interface is showing down but subinterface is showing up. 
ideally subinterface should also be showing down. ?

 

 

DeepakVerma_0-1656413018591.png

Resolved! Best practice for allow Internet IP

Dear All,

 

Now I want to optimize security policy, I have many rule that allow any but now I want to change from "any" to "Internet IP". Does PaloAlto have internet ip object by default? or how I define internet ip in address?

 

Thank you for your help.

  • 24195 Posts
  • 100 Subscriptions
Top Liked Authors
Labels