This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Incorrect traffic on ACC --> Source and Destination IP Activity

Hello for all, We were having problems importing certificates in an automated way in version 10.2.3-H4, so we did an Update to version 10.2.4-H3 and since this version we have verified that the certificate problem has been resolved, however, the network traffic shown on tab ACC --> Source and Destination IP Active is unreal! Then we migrated ...

Palo Alto Cli login

I can log with the same password as web GUI but i cant log in to the CLI using the same password .what could be the issue?

Resolved! How can I see secure ports?

In the Palo Alto GUI, when I go to Objects -> Applications I would like to be able to view the additional secure ports that an application uses. I know you can select the application to view this, but I'd like to be able to see that information at a quick glance. Is there any way to adjust the columns to show secure ports?

dgagnon by • L1 Bithead
  • 2113 Views
  • 1 replies
  • 0 Likes

Resolved! Upgrade path from 9.1.x to 10.1

Hello, I need some help verifying that the below upgrade process from 9.1.x to 10.1.x is correct way. 1. Upgrade to the latest 9.1.x release 2. Download/install 10.0.0 base 3. Upgrade to the latest 10.0.0 relase 4. Download/install 10.1.0 base 5. Upgrade to the preferred 10.1.x release Thank you!

Static route path monitor for dual IPSec tunnels not recovering

We have two ISP's and created redundant IPSec tunnels to our datacenter (one per ISP). We followed this doc on how to setup tunnel failover even though it did not mention that the tunnel IP's needed to be added to allowed tunnel traffic via tunnel Proxy ID setting: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000POO0CA...

Issue with QRadar API 19.0 - Unable to Retrieve Event Data

I'm using QRadar API version 19.0 to fetch event data from our QRadar instance. I'm making GET requests to the appropriate endpoint, providing the necessary parameters like time range and filters. However, the responses I'm getting seem to be empty, even though I'm certain that there are matching events in the specified time frame. Has anyone el...

Panorama 10.1.5-h2 - Adding a PA-220 and serial number already in use?

Adding new firewall PA-220 to Panorama >Managed Devices> Summary. Every time I try to add serieal number it fails to import <serial> already in use.I close the error and search for the serial number in managed devices and it can't be found. I also tried to search using the IP address and it doesn't see it either.Global search on <...

Whatsapp traffic not recognize by palo alto firewall

Hi, In one of the Palo alto firewall Whatsapp traffic is detected as “unknown-tcp” for destination port 5222. Only mobile phone users Whatsapp traffic is detected as “unknown-tcp” & Whatsapp web traffic is allowed for destination port 443 & 80. On the other PA firewall Whatsapp traffic is detected as “whatsapp-base” for destination port ...

Swapping HA connections from Dedicated HA ports to data ports

I have a pair of 3200 firewalls in HA Active/Passive, connected via the dedicated HA1-A / HA1-B copper ports. I need to swap these over to use a pair of fibre ports on the data plane, configured as HA ports. The fibre data ports are pre-cabled together in readiness. In terms of steps to implement this, I was thinking ; 1) Configure data ...

Cortex XDR New Broker VM query

We have received mail from Palo Alto. This mail informs about the new broker VM deployment, which does not update the old broker VM. Therefore, it is mandatory to apply this process ? Dear Valued Customer, We are happy to announce that we have released a new image for the Broker VM. The new image is available to download from your Cor...

Resolved! Not showing interfaces in service route configuration

I'm using PAN-OS 11.0.2-h1 (on GCP) and I am not able to change the service route configuration for different services, when I choose a service i see only one choice: Any I tried to do this via CLI but same result. If i selected interface= Any and Address of the ethernet interface i get server address error. admin@PA-VM# set deviceconfig sy...

Add Palo alto VM into Panorama

Hi, Looks like palo alto VM has no serial number. so this palo alto can be added into Panorama in home lab? Do we have to use serial number to add PA into Panoram? Why it dont use ip address for this purpose?

kevinospf_0-1692132102980.png
kevinospf by • L3 Networker
  • 2989 Views
  • 5 replies
  • 0 Likes
  • 24452 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks