General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4110 Views
  • 0 replies
  • 0 Likes

Invalid Role - RADIUS

Greetings! Am troubleshooting PA authentication using RADIUS. The user is part of the appropriate AD group for the RADIUS configuration and the PA and RADIUS server are both setup for RADIUS auth. On the PA side, added an administrator and set their auth profile as the radius profile. When the user tries to login, the PA log shows: User 'userX' ...

SDorsey by L4 Transporter
  • 11498 Views
  • 8 replies
  • 0 Likes

Resolved! CSRF Protection

GlobalProtect portal page isn't protected by anti-CSRF tokens. Is it possible to add this protection?

LDAPS

I am in the process of setting up LDAPS on an 850. I created an LDAPS server profile and pinted it to our server for credentials. Aftr creating that, I set up an Authentication profile and Authentication sequence (wasnt sure if it was needed but the documentation said it was optional. I created an admin account that has the authentication profil...

NCR saving passwords with MD5 hashing

Hi, was wondering if someone could tell me if there's a way of changing the hashing method when passwords are saved in Palo Alto. I can see from 2010 the method is MD5 and we are also dealing with an NCR stating the same, but I can't see anywhere this can be changed/updated? If this still the current default for storing Passwords in a Palo? Any ...

Ian_Rix by L0 Member
  • 2748 Views
  • 2 replies
  • 0 Likes

problems with LACP

Hello, I am trying to set up a LACP between a palo alto 3220 ztp firewall and a DELL switch, I have the following problem, it does not set up the LACP. admin@PA-3220-ZTP> show lacp aggregate-ethernet all LACP: ******************************************************************************** **AE group: ae1Members: Bndl Rx state Mux state Sel...

Prisma URL filtering

Hello ther have any of you ever had this kind of error?no matter how many times I change the value ( Allow / Deny / Continue ) I always get this error message when I push my configuration .Thanks and have a nice day errors Validation error occurred in: Region: Ireland Validation Error: profiles -> url-filtering -> Navigation Inte...

Resolved! PaloAlto VM Firewall Installation on ESXi Host

Hi Team, We are about to install the VM FW on ESXi host but facing issues while doing it. We have downloaded the base image ova for the version 11.0.1. Is this correct image to install? Or any other image to be used? PA-VM-ESX-11.0.1.ova Actually unable to select this image from Datastore while creating the VM. Somehow when we did that we are ab...

Resolved! GlobalProtect Stuck (Still Working)

Hello, I am stuck on "Still working screen" Logs:Spoiler (Highlight to read)P2018-T27719 06/29/2021 12:48:11:636 Info ( 228): InitConnection ...P2018-T27719 06/29/2021 12:48:11:636 Debug( 57): fd still open before connectP2018-T27719 06/29/2021 12:48:11:636 Error( 80): CPanSocket::Connect - Failed to connect to server at port:4767P2018-T27719 06...

Снимок экрана 2021-06-29 в 12.50.30.png

SSL Certificate expiration date monitoring options

Hi guys,We have external CA certificate for global protect VPN which we want to monitor for its expiration date so that we can get it renewed we in advance to avoid any outage. can anyone pls suggest how can we achieve it. thanks in advance!!

PCNSE Exam lab

Hello everyone, As I am about to get into PCNSE course, I’d like to setup a lab for practicing. Which Cloud Provider could I rely on ? I’m planning to set up a lab made up of a Palo Alto firewall, 02 workstations (one for the management plane and the other one as a lan computer), 01 Server playing the role of an AD and ADCS. Any suggestion fo...

Does Globalprotect support multicast traffic?

I have a scenario where the Radio equipment listens to multicast traffic on the network. Now that we have people working from home, we were wondering if the Radios can be placed on Globalprotect VPN and have the firewall route the multicast traffic. Please advise. Thanks.

  • 24332 Posts
  • 124 Subscriptions
Top Solution Authors
Labels