General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4116 Views
  • 0 replies
  • 0 Likes

Second backup endpoint for IPSEC tunnel

Is there a document that describes how best to configure a backup IPSEC endpoint on an IPSEC tunnel should the primary endpoint go down? Is it just a matter of two tunnels and setting the routing properly or can this be done with a single tunnel configuration but a second endpoint?

URL Categories - "Music" vs. "Entertainment and Arts"

Does anyone else feel like the Palo Alto URL Filtering categories "Music" and "Entertainment and Arts" have a lot of potential for confusing crossover? Name: Music Description: Music sales, distribution, or information. Includes websites for music artists, groups, labels, events, lyrics, and other information regarding the music business. Na...

RSKadish by L2 Linker
  • 8312 Views
  • 3 replies
  • 0 Likes

Resolved! way to block custom ip address and network address in Palo Alto

Hi , On our Cisco FMC we had a group of IP’s and networks – something like 350 in number that we put in a group and then blocked them. In Palo Alto Panorama, the articles that I read says I need to create addresses/objects for each and every one of them and then add them to address group. Surely there must be an easier way for this that I am...

ismailsh by L1 Bithead
  • 6932 Views
  • 1 replies
  • 0 Likes

Disable User

Is it possible to disable a user (local account)? I don't see this option in the web gui, but thought it might be something that can be done using the cli. I need to be able to allow access for specific reasons at specific times and disable access when not needed. Changing the user's password each time is the only other option I can think of so ...

mike406 by L2 Linker
  • 10308 Views
  • 11 replies
  • 0 Likes

PAN Agent service does not auto start

Hi Everyone,I have the PAN Terminal Server Agent installed on several Windows 2008 servers. The service works fine and I have no problems with geting the UserID info when the service is running. The problem is that when the server is rebooted, the service does not automatically start up, causing it to need to be manually started. Is this the exp...

lowride68 by Not applicable
  • 11198 Views
  • 9 replies
  • 1 Likes

Redirecting certain websites to backup PA?

Hi, Is it possible to redirect websites to route to our secondary data centre rather than our primary? There is a PA850 at each of the sites, but for some reason our main data centre is being 403 Forbidden blocked, or being blocked for being behind a "vpn" which it isn't. Basically I just want to set it up so if people go to www.example.com ...

Tadija by L0 Member
  • 2157 Views
  • 3 replies
  • 0 Likes

Resolved! Which weak cipher suites for SSL/TLS to delete

Hi All, I recently had a pen test return the following results: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) ECDH secp256r1 (eq. 3072 bits RSA) FS 256 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) ECDH secp256r1 (eq. 3072 bits RSA) FS 128 TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d) WEAK 256 TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c)...

LSVPN Satellite fails to authenticate

Hello I'm struggling to setup a (not so) large scale VPN solution with one PA-820 ha pair and three PA-410 satellites. I'm using local CA in PA820. At some point I had some success - portal connection succeeded and certificates were issued to satellite, however gateway connections didn't worked. Then I realized that I leaved local CA lifetime to...

GeorgeAPH_0-1684838429150.png
  • 24334 Posts
  • 124 Subscriptions
Top Solution Authors
Labels