General Topics
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics

Forum Posts

Happening in June: The Complete Zero Trust Network Security Event

Greetings everyone, Don't miss Palo Alto Networks' Complete Zero Trust Network Security event coming up in June. This event will cover the following points related to the newly unveiled Zero Trust Network Security: Secure access to the right applicat...

seattle-launch-live-community-r2b-1100x120.jpg
jdelio by Community Team Member
  • 436 Views
  • 1 replies
  • 4 Likes

Resolved! GlobalProtect, Working from Home, Prisma Access and Covid-19

To all, Just wanted to post a message about the Hot Topic right now, which is Covid-19. With all of this going around, everybody's health and safely is the utmost concern. Keeping your hands clean, washing your hands (A LOT), using hand sanitizers, a...

jdelio by Community Team Member
  • 18100 Views
  • 41 replies
  • 32 Likes

Resolved! DoS protection policy process order

Hi All, Basic question and l think l know the answer but just would like to confirm.Is it the same for the DoS protection profiles if you compare with normal security policies, fist match from top to bottom?I have a general DoS rule with broad src an...

myky by L3 Networker
  • 1395 Views
  • 2 replies
  • 1 Likes

High CPU on fresh minemeld ansible install

Hello, I just installed minemeld on Ubuntu 18.04 (with a few tweaks from here) and the setup was working. But now I have a VM that consumes 2 full CPUs since about 30 minutes. When I try to login to the admin web interface I get after a few seconds t...

Deas.h by L1 Bithead
  • 1554 Views
  • 7 replies
  • 0 Likes

Error generating a new certificate

Hi, we are trying to generate a new elf-signed certificate in Panorama and we receive this error: Failed to insert certificate into configuration. Failed to find beginning of certificate. Make sure certificate starts with BEGIN CERTIFICATE tag. This ...

cert1.JPG
cert2.JPG
jesuscano by L4 Transporter
  • 3242 Views
  • 10 replies
  • 0 Likes

Resolved! GloablProtect

Hello Community, I am new to palo alto. we have deployed some firewalls in our company. I am trying to configure globlalprotect on the branch offices to add more gateways. I have an extra internet connection at one location and wanted to know if its ...

Globalprotect.PNG

Report mismatch

We are facing issue with mismatching of bandwidth statistics between our weekly report and custom total bandwidth report. For example, on 11 Nov the bandwidth shown on the weekly report is around 2000GB but the one shown on the custom total bandwidth...

Report.jpg

Allow downloading from Akamai or other CDNs

PANOS 8.1 Hi all - I have ongoing issues with trying to control downloading of files from CDNs. An easy example is .cab files used by Microsoft Office templates. When you download a template it goes off to a page off: templatesmetadata.office.net, bu...

SARowe_NZ by L3 Networker
  • 1303 Views
  • 2 replies
  • 0 Likes

Panorama VM running on ESXi 6.7?

Dear community, I had a Panorama VM running Pan-OS 8.1 without any issue on top of VMware ESXi 6.7, after upgrading to 9.0.4 the host is rebooting the VM from time to time with the following error log:"..........reset by vSphere HA. Reason: VMware To...

Carracido by L3 Networker
  • 1841 Views
  • 2 replies
  • 0 Likes

Resolved! Block all traffic but a single IP Address

Let me start by saying that I am not a firewall expert by any means but I think the task I have is simple. I want to block all traffic through a PA-500 except for a single conversation between a dedicated machine on each side of the firewall. Is ther...

hdaigle by L0 Member
  • 1174 Views
  • 3 replies
  • 0 Likes

Cisco ASA to Palo Migration for ACLs

It seems to me that the "migration" from Cisco ASA to Palo is not apples to apples. Working in ASA for quite some time I am able to control traffic as what I allow in to the interface....So if I have 14 security zones I can control what comes into in...

Resolved! GlobalProtect VPN - Management Access

Hi, Does anyone know a way to get access to the panos web management interface over a globalprotect VPN? We are using three interfaces on our firewall; 1 - Management Interface2 - Trust3 - Untrust Global Protect is setup on the trust - and I have a r...

HyderB by L0 Member
  • 1804 Views
  • 2 replies
  • 0 Likes

Slow speed via Global Protect.

I have VM300 with GP without split tunnel. Between with and without GP their is a lose of around 6mb.Is it acceptable to have 6mb of overhead lose? Will enabling/disabling ipsec in ssl vpn setting make any difference.

Resolved! Commit Function on Suspended PA

When PA is in active passive mode.I suspended the active PA and passive took over.This is fine. I did the config changes on the suspended PA and did the commit.I saw that config changes from suspended PA got syn with active PA?My understanding of sus...

MP18 by Cyber Elite
  • 696 Views
  • 2 replies
  • 0 Likes