This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4117 Views
  • 0 replies
  • 0 Likes

External list not populating

I have a simple ask to pull a list of IPs from an external txt file into a PAN. I can reach the URL and its simply a text file with CIDRs separated by lines. However, when looking at the list entries and exceptions its blank. I seem to have the same problem with a domain list as well. Has anyone done this before and can point me in the rig...

drewdown_0-1621012597299.png
drewdown by • L4 Transporter
  • 15986 Views
  • 8 replies
  • 0 Likes

Start Network Security Basic to Advance || Firewalls Theory, Labs & Practical Project

From Where to start Network Security Basic to Advance || Palo Alto Firewall As mostly IP Network/IT system Engineer confused that from where to start Network & Cyber Security concepts & practical Hands-on experience, in this article I will explain & clarify all the below queries · Basic theoretical Network security concepts · W...

ReadTech_0-1686669048151.png
ReadTech_2-1686669192001.png
ReadTech_3-1686669233957.png
ReadTech by • L1 Bithead
  • 4115 Views
  • 2 replies
  • 1 Likes

Global Protect - Could not connect to the Global Protect gateway.

Hello, I have an issue with Global protect connection for our customer. They are trying to connect via external PC/network and are having issues. When they are trying fomr internal PC/network they have no issues at all. I have a log from Global Protect app that customer send me. Can you guys help me what could be the issue here ? I am run...

Allow WeTransfert download but block Upload

Hi, i will try to block upload and allow download. I would try to use app-id but the two app-id download and upload depend on wetransfer-base. Example : If im allowing wetransfer-download and im blocking wetransfer-upload and wetransfer-base : wetransfer-download is blocked because of blocking wetransfer-base. There is way to do what ...

IT-DSIC by • L0 Member
  • 2431 Views
  • 1 replies
  • 0 Likes

Split-tunnel not working properly

Hi folks, Our customer configured split-tunnel on VM to include only certain IP addresses and domains and want to exclude any other traffic, so exclude options are blank. It seems that some traffic is still routed through tunnel (f.e.Telegram, bittorrent etc.) We tested this config on panos 10.1.6 as well as on 10.1.10. Also we were testing...

Resolved! How to filter traffic log by non-empty user

HelloHow to filter traffic log by non-empty user name in Source User field?.I have Captive Portal for uers, but some exeptions for printers and other stuff that isn't able to logon. Id like to filter traffic and get only traffic that isn't authenticated.How to do that?I know that I can put IP address insted of user names - but I want to know is ...

_slv_ by • L4 Transporter
  • 6584 Views
  • 3 replies
  • 0 Likes

Resolved! Can Panorama M-200 support PA-5410

I'm upgrading to PA-5410 and I can't find the documentation showing if the M-200 supports this device. Is there a link that shows what PA devices are managed by each Panorama device? I've looked everywhere online and can't find anything.

Resolved! Simple IPsec tunnel interfaces not passing MAC address

Good afternoon, I've got a simple site to site IPsec tunnel in non production that I'm having a problem with. Currently I have the mgmt interface up. I also have my trust/untrust interfaces connected to a Cisco switch on the appropriate VLAN's for the subs I have programed on my PA-440. For some odd reason, I cannot see the MAC addresses of...

danoman2 by • L3 Networker
  • 3679 Views
  • 4 replies
  • 0 Likes

"Warning! authentication for output feeds is disabled", again

Hi Team, we installed Minemeld a few days ago and we are fighting with the old issue "Warning! authentication for output feeds is disabled". Our MineMeld instance runs as a docker Installation on Ubuntu 16.04 LTS. Installation was done with the documentations, which we are found here at PaloAlto LIVEcommunity (Minemeld using docker). MineM...

PEnzenmueller_0-1626259603605.png
PEnzenmueller_0-1626264985332.png
PEnzenmueller_3-1626260194258.png

Blocking ChatGTP

Hi Guys, @BPry @kiwi How do you go an blocking ChatGTP ? Seems like has not been defined in the list of apps yet (applipedia) Thanks, Pkarki

Pras by • L4 Transporter
  • 16748 Views
  • 5 replies
  • 1 Likes

Resolved! security policy in monitor mode only

Hi, This is a new Palo Alto deployment. We used to have Cisco FTD as IPS and now we are replacing with Palo Alto. We have 3 devices (router and SDWAN) that we configured using vwire so all traffic to the DC would pass through the Palo Alto inspection as IPS. I would like to deploy the security profiles/group (vulnerability/antivirus/spywar...

ismailsh by • L1 Bithead
  • 4063 Views
  • 3 replies
  • 0 Likes

API - Fetching URLs from Custom URL object

Hi all, we have a Custom URL category object, WL-URLS, which contains a number of URLs for a whitelist policy. I am looking to find some information on how to go about retrieving the URLs from this object via the XML API. My preference is the XML API as I am working with the Python PAN-XAPI library, however I'm struggling to find what I'm look...

365 tenant restrictions problem with office365-enterprise-access

Noticed that a few of our enterprise logins that were previously identified as "office365-enterprise-access" are now being identified as "ms-office365-base". I've found an article explaining some of the issues. I know that this was working flawlessly about 2 years ago, but something must have changed with MS or with palos enterprise access ap...

Sec101 by • L4 Transporter
  • 3492 Views
  • 1 replies
  • 0 Likes
  • 24334 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks