This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

PA-5410 slow page loads

we have a new PA been in line about a week, i had to take it out today and replace it with my old barracuda firewall because of slow page loads. For example going to speedtest.net it may take 45sec to a minute for the page to load where i can initiate a test, but once it loads i get my expected speeds (about 850MB up/down). This is the same for...

branedge by • L2 Linker
  • 1907 Views
  • 2 replies
  • 0 Likes

Resolved! Wrong end user assigned to a lab device

Hello the community 🙂 I've bought a new palo alto 440 via partner here in belgium. The distributor assigned the device to the partner as end user instead of me. This has for cause that i can't create my support account and i can't activate my licence. And this for more than 2 months.. We're checking with the distributor but nothing change...

When is PAN-OS 10.2.5 release

I have an issue PANW TAC mention it will fixed at PAN-OS 10.2.5 but previously PANW TAC mention they didn`t get the date when it will release. After 1 month may I know the release date is already aannouce?

JiaXiang by • L4 Transporter
  • 8919 Views
  • 12 replies
  • 1 Likes

Cannot discover OSPF neighbor on PA

Hi, I faced a foundamental issue that my PA-VM cannot discover OSPF neighbor on Cisco vRouter. Cisco cannot discover PA either.I use e1/2 on PA as the port to connect cisco vRouter, which is 192.168.150.1/24, and cisco router address is 192.168.150.2/24, area is 0.0.0.0 on PA and area 0 on cisco.The cisco router can ping PA e1/2 successfully.My ...

net300 by • L0 Member
  • 5285 Views
  • 4 replies
  • 0 Likes

gre tunnel problem in HA (Active/Passive)

Hi everyone, I have a problem about gre tunnel in HA (active/passive). Currently, two PA-220 firewalls are configured as active-passive HA. (Settings are also synced between the two devices.) If I configure and commit the gre tunnel on the active device, the gre tunnel is up on the active device while the config is synced to the HA device....

Resolved! Internet Bandwidth usage reports

Hi everyone, I'm trying to find a way to create a report for Internet bandwidth usage over time. we are using PA850 version 10.1.9h3 I know I can see live statistics on Network - QOS, but I need a report for the last 7 or 30 days. It can be daily average. Thank you all for the help.

SShnap by • L3 Networker
  • 10629 Views
  • 4 replies
  • 0 Likes

Resolved! Request help on Mac m2 and Windows 11 for VPN connection

I am one of a few Mac uses in a sea of Windows at Advance Auto Parts ( I am a independent Jobber located in Canada). The help desk is less helpful when they hear that. Trying to connect new Mac M2 with Parallels 18 but help desk says that GolbalProctect ( v6.0.0-262 ) won't work. To their credit they did try twice before giving up. Questio...

GregGGHH by • L1 Bithead
  • 6893 Views
  • 5 replies
  • 0 Likes

Global Protect Azure SAML authentication

PAN OS 8.1.6 currentlyGP Client 4.1.13-2 and 5.0.7-2 (testing) Attempting to use Azure SAML authenticationwent through standard procedures..import fed metadata xml from azure.validate IDP cert unchecked.Azure cert imports automatically and is valid.auth profile with saml created (no message signing) when Browsing to GP portal URL, redirection ...

Global Protect Connection Issues

Since upgrading to Pan OS 11.0.2 - been having issues connecting. Seems to be a cookie issue where cookies are not be regenerated after expiration. - I will see cookiie expired in the Palo monitor. If you wait 5 minutes and try again - you normally get in - but not always. Did not have this problem on version 10.0.x, 10.1.x, 10.2.x... Only whe...

Rollback Multi Virtual System Capability tick box on the Firewall.

Hi team, Can you help me with an issue that has occurred. We were on the process of adding an extra vsys on our firewall when we realized that this model of firewall requires a license for it to be activated. Since there was no license, we have reversed all the changes except the Multi Virtual System Capability tick box on the firewall. ...

Resolved! user-id-agent unexpected here

Hello, i just update pan os from 9.1.6 to 10. And on one of the firewall i get error:..........Validation Error:user-id-agent unexpected herevsys is invalid[edit] Could you please advice were can be the problem.Thank you!

stef by • L2 Linker
  • 11463 Views
  • 5 replies
  • 0 Likes

Resolved! PA SUPPORT - OR THERE LACK OF - Changing the SNM on an interface

I would like to state that I tried 6x to create a support ticket - was redirected to LIVE Community EVERY TIME - when I called for support was told I needed to open a case online – which I was NOT able to. I need assistance changing the subnet mask on an ISP interface. Then I attempt to validate the changes – it fails because of dependencies....

Resolved! PBF for incoming traffic

Hello everyone, I've a setup on a PA-820 cluster with 3 ISP connections. Every connection has its own zone (for clarity WAN-1, WAN-2 and WAN-3) and the default route in the virtual router is for WAN-2. I need to publish some services from my DMZ subnet on the WAN-1 but if I try to configure the nat and security policy i can't see any sort of tra...

vulnerability block-ip inoperative

I put anti-spyware vulnerability protection critical, high The action is set to block-ip 1800 From the threat log, we can see that spware is effective, but vulnerability is not effective, it is drop, not block-ip I also checked flahs like client to server I'm not sure if this is a bug

  • 24455 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks