This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! About address object with FQDN and apply it to security policy.

If I have a FQDN "abc.com" that have two DNS records 10.0.0.1 and 10.0.0.2.Then I create a address object with FQDN type, and the value is "abc.com"When I use this object into security policy, how does it working? Does it become 10.0.0.1 or 10.0.0.2 ? or it will randomize according to catch?If a client connect to "abc.com", and the client's DNS...

neilwu by • L2 Linker
  • 17020 Views
  • 5 replies
  • 0 Likes

Best config to speed up HA failover

During the last PAN OS upgrade we had to failover between two firewalls in HA configuration. The failover time takes unusually amount of time during which the Internet access was unavailable. It took approximately 10-15 lost pings (to internet host) for passive to become an active. We had opened a case with PAN support and our zoom meeting was d...

Resolved! What cloud services are affected by CVE-2020-1982?

Dear Team, When checking CVE-2020-1982 in Palo Alto Networks Security Advisories, we found the following text: > These cloud services include Cortex Data Lake, the Customer Support Portal, and the Prisma Access infrastructure.URL : https://security.paloaltonetworks.com/CVE-2020-1982 The above phrase includes CSP. So does this mean that ...

Resolved! capturing ssl decrypted traffic

Hello group,as I'm thinking that someone is doing nasty things in the SSL-traffic, I thought of decrypting the ssl, capture the decrypted packets and put the into wireshark to look at it.Only I could not find a way of explicit tell the PA to capture the decrypted traffic only.Is there someone out being able to help me with that topic?Thanks a lo...

Resolved! Panorama plugin log(AWS&K8S) delay

Dear Team, I linked Panorama to the VM firewall. Of course, the Timezone was set the same for both devices. (asia/seoul) However, if I check the plugin log (AWS&K8S) in real time on Panorama, I will only see logs from about 4 hours earlier than the actual work time. Has anyone experienced or solved this symptom? Please give me some a...

Resolved! Palo Alto PA-5220 - Data-plane traffic stops intermittently for 20-30 min

We have a PA-5220 which seems traffic through data-plane stops intermittently for 20-30 min comes back up by itself. The issue does not affect our management access as we are using the dedicated management interface which from what I understand it has its own resources separate from the data-plane. On the gateway, Intrazone communication does no...

Millennium (mp)# について

はじめまして。 勉強用にpa820を購入しました Millennium (mp)# と出てきたのですが、イメージの破損でしょうか？ どなたか解決方法を教えていただきたいです。 よろしくお願いします。

No Logs for DMZ zone

We have created a NAT policy to access the Server in the DMZ zone, we can able to successfully connect to the server from public network. But, we cannot see the traffic logs for the same.

Source and Destination NAT for PA-VM on Azure Cloud with VPN tunnel

Hello everyone, I am working on a project to deploy a Cluster of two Palo Alto VM's on Azure. While designing the solution with an internal and external Loadbalancer (you can see the picture in my post) i don't know if i need to configure Public IP address in both Firewall's external interfaces to handle a source NAT for internal resources and a...

Image_Palo_Forum_NAT.PNG
louey11 by • L0 Member
  • 5961 Views
  • 2 replies
  • 0 Likes

Determine configuration size on Palo Devices

Hi,How can we determine the configuraiton file size on Palo Alto PA devices.We wish to determine were our configuraiton size is compared to the recommened size for each PA type 5K 7k etc.Thank you

dwmaas by • L2 Linker
  • 19433 Views
  • 6 replies
  • 0 Likes

Export configuration change message failed via SCP

Hi Panorama export configuration change message is configured to be sent to SCP server. The SCP is installed at PC/Win10. When trying to test the connection between Panorama and the SCP, I launch the connection from SCP. but I got the below situation. The scp can access Panorama banner, but then it stop at Starting the seccssion. Please see the ...

kevinospf_0-1693762225740.png
kevinospf_1-1693762254753.png
kevinospf by • L3 Networker
  • 1375 Views
  • 1 replies
  • 0 Likes

Config (XML) import to device, using Panorama

, XMLDear all,The Panorama feature "Scheduled Config Export" is a great way to backup all device configs to a central backup repository.I known one can import this XML config from the device itself,But would there also be a way to import the complete XML files to respective device USING panorama?Thanks,Wim

wimjuste by • L1 Bithead
  • 7953 Views
  • 6 replies
  • 0 Likes

Resolved! Firewall cannot be added to panorama

Hi Serial number is got from palo alto firewall, we try to add the firewall into panorama. but I got the error message as below picture. This firewall is the first one to be added to panorama. why it has Maximum issue? Thanks

kevinospf_0-1693278009012.png
kevinospf by • L3 Networker
  • 4574 Views
  • 7 replies
  • 0 Likes
  • 24454 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks