General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Traffic redirects to captive portal

We currently have a policy in place that allows all HTTP and HTTPS traffic from a test server (Trust) with a static IP address to reach untrusted networks. However, when accessing the server from a browser, it automatically redirects to a captive portal and blocks internet access for server applications. The internet was functioning properly on ...

Bijesh by • L1 Bithead
  • 2398 Views
  • 1 replies
  • 0 Likes

URL Profile Known Bad Categories

What are the known bad url categories that palo checks is blocked? We currently block all the categories in this document but AI-Ops still flags it. Is there a way to see specifically what its failing? Malicious URL Categories (paloaltonetworks.com)

Claw4609_0-1687291149037.png
Claw4609 by • L5 Sessionator
  • 2678 Views
  • 3 replies
  • 0 Likes

Backline support not answering - how to raise a case with Palo Alto directly

We are supposed to have 24 x 7 support through Westcon but have been unable to contact them. Previously when emailing their support an autoresponder would reply with a ticket number. Not even this happens now. The AUS support number rings out. Is it possible to raise a case with Palo Alto directly - we have a VPN issue that must be resolved by...

Replacing Cisco HSRP Pair with Palo in Active Standby - 2x ISP Transit BGP

Hi, Currently we have a pair of Cisco routers each connected to a different ISP with static addresses. We have a public address range 203.x.x.x/24. The inside interfaces of these pair of routers are .2 and .3 of this public address range and the HRSP .1 between them. Currently each router takes the full BGP tables from its connected ISP and ...

Before.jpg
After.jpg
DunkleyG by • L0 Member
  • 2422 Views
  • 1 replies
  • 0 Likes

Dectyption Issue

Dear Team! I got a problem with Decryption on some websites. For example admin.microsoft.com. When I try to open this website, the web browser gives me a simple white blank without any content in it. In this case, decryption is on. I saw the error, depending on the certificate chain of trust, and I follow the documentation and imported the missi...

Resolved! Palo Alto cluster questions

1. Palo Alto HA Sync links can be on different networks ? HA1 seems not "The HA1 IP address for both peers must be on the same subnet if they are directly connected or are connected to the same switch." But like to confirm. I saw the gateway configuration for those links. HA2 seems possible, "Use Layer 3 only if the HA2 connection must...

gongya by • L3 Networker
  • 2494 Views
  • 2 replies
  • 0 Likes

Resolved! PA-3020 to PA-460 Migration

Hi All, We are migrating one of our PA-3020 to PA-460 next Monday. > PA-3020 is managed with the Panorama. > Panorama is in the version 10.0.11 and the PA-3020 is in the version 8.1.18. > Could you please help me with what all need to be considered while migrating this firewall to PA-460. > Panorama is hosted on a VM. > Can i jus...

disk partitions in Panorama VM not being properly used

Dear Community, I have added to Panorama VM (mode VMware ESXi) 3 extra disk units: 2TB, 2TB and 12TB. The Panorama is acknowledging all the disk units and partitioned the 12TB unit in 6 x 2TB units, until here all good. But 4 of the partitions /dev/sdd1-3 and sdd-5 shows only 1% used. Do you have any idea why this is happening? It appears t...

Carracido by • L4 Transporter
  • 3583 Views
  • 3 replies
  • 0 Likes

Bad Gateway Error when commiting with outputs

When I attemt to commit changes to Minemeld that include outputs using data from a local DB. Does anyone have any insight into what the Bad Gateway error signifies? I have attached a screenshot of the error message I am receiving.

svdaddio by • L1 Bithead
  • 11249 Views
  • 6 replies
  • 0 Likes

brdagent restarted unexpectedly

Dear Team! Hi once again. The system goes into maintenance mode. But before the system goes maintenance mode, I faced that all traffic is in "Incomplete status."After that, the firewall goes into maintenance mode. After rebooting, all works correctly. But, the main question: What was that? The root cause of the problem.I checked the resource mo...

False positives generated by alert Masquerading - 1396383840

Hi, Is anyone else experiencing lots of false positives for the BIOC - Masquerading - 1396383840, specifically relating to signed Microsoft system 32 files and Chrome? The files initiating the alerts are all signed, have not been modified for a long time and I cannot see any malicious behaviour.

  • 24474 Posts
  • 125 Subscriptions
Top Solution Authors
Top Liked Authors
Labels