General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4468 Views
  • 0 replies
  • 0 Likes

Swapping HA connections from Dedicated HA ports to data ports

I have a pair of 3200 firewalls in HA Active/Passive, connected via the dedicated HA1-A / HA1-B copper ports. I need to swap these over to use a pair of fibre ports on the data plane, configured as HA ports. The fibre data ports are pre-cabled together in readiness. In terms of steps to implement this, I was thinking ; 1) Configure data ...

Cortex XDR New Broker VM query

We have received mail from Palo Alto. This mail informs about the new broker VM deployment, which does not update the old broker VM. Therefore, it is mandatory to apply this process ? Dear Valued Customer, We are happy to announce that we have released a new image for the Broker VM. The new image is available to download from your Cor...

Resolved! Not showing interfaces in service route configuration

I'm using PAN-OS 11.0.2-h1 (on GCP) and I am not able to change the service route configuration for different services, when I choose a service i see only one choice: Any I tried to do this via CLI but same result. If i selected interface= Any and Address of the ethernet interface i get server address error. admin@PA-VM# set deviceconfig sy...

Add Palo alto VM into Panorama

Hi, Looks like palo alto VM has no serial number. so this palo alto can be added into Panorama in home lab? Do we have to use serial number to add PA into Panoram? Why it dont use ip address for this purpose?

kevinospf_0-1692132102980.png
kevinospf by L3 Networker
  • 2797 Views
  • 5 replies
  • 0 Likes

Resolved! External DHCP Server Configuration

I am running a Microsoft DHCP server on my domain and this is serving IP's over my Paloalto LAN interface 3 so my DHCP server and LAN are on the same interface.I am trying to migrate my DHCP server on a separate port and in this case ethernet 8.I made all the neccessary Policy configuration so my migrated DHCP server and my clients on LAN had no...

mstf_ymn by L0 Member
  • 4530 Views
  • 2 replies
  • 0 Likes

New created Local admin fail

I have issue when create local admin password, it is not working. It show below error “2023-08-07 09:55:43.566 +0700 debug: pan_auth_request_process(pan_auth_state_engine.c:3612): Receive request: msg type PAN_AUTH_REQ_GET_PW_CHANGE_REQUIRED, conv id 310, body length 642023-08-07 09:55:43.566 +0700 debug: pan_db_funcs_request_process(pan_auth_...

Resolved! WinRM-HTTP Connection Refused

Hello, I'm using agentless user-id with a Windows Server 2012 AD through WMI, we recently updated the server, and it started throwing Authentication Error 10036 flooding our Windows logs. We've searched and troubleshooted the problem for a long time and nothing worked, the only workaround that we think might work is to change the authentication ...

echahine by L2 Linker
  • 31145 Views
  • 8 replies
  • 0 Likes

DHCP issue

We are currently experiencing an issue with our network setup that involves the DHCP server, Palo Alto firewall, core switch, and access switches. Our DHCP server is connected to the Palo Alto firewall, followed by our core switch and access switches. The problem arises with VLAN-503, where the gateway is located in the firewall. However, in the...

What causes dynamic updates to be logged as fail whilst the installation has gone through in PAN-OS 5.0.8?

I have been having the system log entries below for some days and still continue after installing Application and Threats dynamic updates (3 versions) manually as well as turning off the update schedule and rebooting one of the boxes in HA mode.2013/12/04 11:01:56 medium general general 0 Failed to upgrade Application identification/Threat...

edgarfc by L0 Member
  • 4111 Views
  • 2 replies
  • 1 Likes

not able to submit case through customer support portal.

after creating my support case, when coming to the last step after clicking the submit file case button, the page just loads and does not submit my ticket. I have restarted the process something. Tried different browser and even cleared browsing history, and same problem. Has anyone experienced this? If so, how can I go about this issue.

Resolved! Letter b’ ’ at the beginning of each cell after the upgrade 10.2.2-h2

A experienced the below issue after the upgrade 10.2.2-h2 PA-5220 Since upgraded to 10.2.2-h2 all reports come with a strange letter b’ ’ at the beginning of each cell which was not there before. Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial nu...

How to configure an ISP with a gateway on a different subnet?

I got myself a weird one, for me at least. Got a remote office I'm not much involved with that got a new internet line and I'm supposed to configure it, but the info I got is just this: Client IP: 50.150.200.6 / subnet mask 255.255.255.255 50.150.201.136-139 / subnet mask 255.255.255.252 Gateway: 170.140.30.1 DNS: 1.1.1.1/9.9...

thebard by L0 Member
  • 3383 Views
  • 1 replies
  • 0 Likes

Resolved! DMZ

We only have one public IP. Can I still set up a DMZ? If so, can someone point me to a good article on setting one up? I have found several but nothing that specifies if it is okay to set up using a single IP.

  • 24379 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels