General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

RTCP issue for matching policy

Hi,

 

We are having a issue with RTCP traffic. The RTCP traffic is jumping the rule configured for this and matching the last rule (bypass).

 

The filter for the correct rule is application rtcp. We see that the application is identified but sometime

...

BigPalo by L4 Transporter
  • 3430 Views
  • 7 replies
  • 0 Likes

Resolved! interface-management-profile - CLI

Hello

 

When I am configuring sub-interface (or interface) with CLI from Panorama as :

 

set template [name] config network interface ethernet ethernet1/x layer3 interface-management-profile [Profile] units ethernet1/x.x comment [comment] tag [xx] ip

...

Active/Active failover triggers for multiple Vwire?

Hello,

 

I've been looking for some time docs which closely describe PA Active/Active setup for only Vwire interface mode (multiple defined Vwire's), especially failover triggers like a link or path monitoring, but no luck. I decided to start with th

...

Tician by L1 Bithead
  • 1533 Views
  • 2 replies
  • 0 Likes

GlobalProtect stops to connect

Hi all,
GlobalProtect stopped to connect to server. 
So it works before ( I did not install any new software, firewals, proxies, .... etc) It contiue work under VirtualBox machine, so it is not a problem of my internet provider, but it stops to connect

...

BGP AS-Path allow

Hi All,

 

I suspect the answer to this is in the Advanced Routing in PanOS 10.

 

We have configured a new system as Active-Active and BGP. The firewalls are in different DCs, the DMZ side of the firewall can talk to routers in both DCs but only its l

...

a.jones by L3 Networker
  • 2198 Views
  • 3 replies
  • 0 Likes

Allow traffic other than IPSec

Hi all,

 

Site A

Source Zone: test-DMZ

Interface: ae 1 (172.16.1.1)

Tunnel Interface is in internal-trust zone.

Static route set to destination 10.10.10.1

 

I have an IPsec tunnel between 2 sites. 

However, i want to allow traffic from other sources

...

mike.07 by L1 Bithead
  • 1303 Views
  • 2 replies
  • 0 Likes

How to whitelist specific URL with path included.

I want to whitelist a specific URL with path. Eg: https://live.paloaltonetworks.com/t5/forums/postpage/board-id/members_discuss

I tried adding it the same as it is in URL category and created the following rule:

Source: Ip of source

Destination: ANY

...

Amey05 by L0 Member
  • 1796 Views
  • 1 replies
  • 0 Likes

Active-Active Firewall - BGP failure condition

Hi All,

 

How can I instigate a firewall failover for an Active-Active firewall if BGP fails? I feel I need a full failover but please tell me if I am wrong.

 

Here is the situation: Firewall in Active-Active mode, HA1,2 and 3 up. BGP peering on outs

...

a.jones by L3 Networker
  • 1424 Views
  • 1 replies
  • 0 Likes

Unable to Login After Factory Reset

Hello Community,

 

I have just carried out a factory reset. However, now I'm not able login with the admin-admin login/password. 

 

I'm presented with the prompt:

 

PA-HDF login: 

 

I read I should wait for the prompt:

 

PA-500 login:

 

However, the

...

reset qos application statistics

Hi all,

 

I was wandering if there's a way, under network -> qos ->statistics, to reset the application list of an interface.

 

These list are never refresched and contain applications that are no more seen. So I really would like a fresh start in or

...

DNS security license

French Arab milf an*l f*cked - https://livesex.run
Pegging bisexual cuckold and shemale - https://sexcam.red
Closeup titf*ck and bl*wjob - https://livesexcams.work

Leohec by L0 Member
  • 1147 Views
  • 1 replies
  • 0 Likes

Resolved! Suspected Credential Phishing Detected

Hi!

 

Users connecting to our network via VPN receive "Suspected Credential Phishing Detected" when attempting to log into our in-house equipment reservation webpage. The URL filtering log indicates a blocked URL action on category "government".   I'

...

  • 23587 Posts
  • 103 Subscriptions
Top Solution Authors
Top Liked Authors
Labels