This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

QoS Configuration

Hi All, I am new to QoS config on Palo. We need to limit BW for the users passing the particular interface. Users from internal network to internet facing interface they should be limit to 2Meg. Is this config possible? Any KB article that suggests this kind of config please. Regards, Sanjay S

LogDB Import failing - anyone suggest why?

Folks. I'm about to upgrade my 2020's to 3050's (yay for new budgets!), and I'm trying to preserve the historical log data from my old firewalls by exporting and importing into the new ones. I've managed the export - at least, I'm pretty sure I have - but when I try and import, I get the following error after a period of time. ./dailythsum/1/201...

darren_g by • L4 Transporter
  • 4331 Views
  • 2 replies
  • 2 Likes

Resolved! Cacti template for PA5260

Hello, i looking for a cacti template for my PA5260 running PAN OS 10.1.8 for monitoring the device and all interface and subinterface. Best Regards.

Nathus by • L1 Bithead
  • 3083 Views
  • 3 replies
  • 0 Likes

Resolved! URL Filtering - is this necessary - need clarification

My predecessor managing the Palo firewalls always entered a website/URL four times in the URL Blocklist using the format below as an example: netflix.com *.netflix.com netflix.com/ *.netflix.com/ Is this really necessary? Doesn't *.netflix.com accomplish the same thing or are these all necessary? The examples here: https://knowledgebase...

Windows User-ID Agent Access is denied

I'm setting up User-ID. i have a windows server 2012r2 domain controller, and a windows server 2019 domain member for the agent software. I have configured a service account with user rights assignment to allow logon as a service on the agent host. i have configured permissions to the install directory and to the registry key for the softwar...

Resolved! Upgrading PanOS from 9.1 to target version 10

Hello Bros' currently we are in the PanOS version 9.1.x and according to this link https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary this version will be EOL by 12/2023. from this I can understand that the all version of 9.1 will be EOL, means I will have to move to the PanOS version 1...

URL list to block AI online tools

Hello Community, I know there is a new application for AI tools, but its just for Chatgpt and I already have a DENYALL plus a special filter for new Applications using the Filter: However does anyone have a comprehensive URL list for AI websites? Want to block those as well. Here is a short list of what I have scrounged so far. chat.openai.co...

OtakarKlier_0-1683730824509.png

External list not populating

I have a simple ask to pull a list of IPs from an external txt file into a PAN. I can reach the URL and its simply a text file with CIDRs separated by lines. However, when looking at the list entries and exceptions its blank. I seem to have the same problem with a domain list as well. Has anyone done this before and can point me in the rig...

drewdown_0-1621012597299.png
drewdown by • L4 Transporter
  • 17215 Views
  • 8 replies
  • 0 Likes

Start Network Security Basic to Advance || Firewalls Theory, Labs & Practical Project

From Where to start Network Security Basic to Advance || Palo Alto Firewall As mostly IP Network/IT system Engineer confused that from where to start Network & Cyber Security concepts & practical Hands-on experience, in this article I will explain & clarify all the below queries · Basic theoretical Network security concepts · W...

ReadTech_0-1686669048151.png
ReadTech_2-1686669192001.png
ReadTech_3-1686669233957.png
ReadTech by • L1 Bithead
  • 4862 Views
  • 2 replies
  • 1 Likes

Global Protect - Could not connect to the Global Protect gateway.

Hello, I have an issue with Global protect connection for our customer. They are trying to connect via external PC/network and are having issues. When they are trying fomr internal PC/network they have no issues at all. I have a log from Global Protect app that customer send me. Can you guys help me what could be the issue here ? I am run...

Allow WeTransfert download but block Upload

Hi, i will try to block upload and allow download. I would try to use app-id but the two app-id download and upload depend on wetransfer-base. Example : If im allowing wetransfer-download and im blocking wetransfer-upload and wetransfer-base : wetransfer-download is blocked because of blocking wetransfer-base. There is way to do what ...

IT-DSIC by • L0 Member
  • 2610 Views
  • 1 replies
  • 0 Likes

Split-tunnel not working properly

Hi folks, Our customer configured split-tunnel on VM to include only certain IP addresses and domains and want to exclude any other traffic, so exclude options are blank. It seems that some traffic is still routed through tunnel (f.e.Telegram, bittorrent etc.) We tested this config on panos 10.1.6 as well as on 10.1.10. Also we were testing...

Resolved! How to filter traffic log by non-empty user

HelloHow to filter traffic log by non-empty user name in Source User field?.I have Captive Portal for uers, but some exeptions for printers and other stuff that isn't able to logon. Id like to filter traffic and get only traffic that isn't authenticated.How to do that?I know that I can put IP address insted of user names - but I want to know is ...

_slv_ by • L4 Transporter
  • 6958 Views
  • 3 replies
  • 0 Likes
  • 24431 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks