General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! PAN-OS version is not update on CDL Portal

Hi ,

Anyone have some solution for this issue about PAN-OS version is not update on CDL Portal after update to V.9.1.13-h3?
Last week I had updated PAN-OS from version 9.1.9 to version 9.1.13-h3 on HA Firewall .I got this issue on the active peer FW.
Af

...

Version_.jpg
Jirapan by L1 Bithead
  • 1685 Views
  • 1 replies
  • 0 Likes

Audio drops after 15-30 seconds for incoming calls

After our upgrade from PanOS 9.1.12 to PanOS 10.0.8, We've been experiencing this issue where our incoming calls will work fine for several weeks, then out of nowhere (randomly at any given day), incoming calls will drop after 15-30 seconds after the

...

Listing PCAP rules

Does anyone know if there's a way to search for rules within the Palo Alto which have packet capture enabled? I'm trying to see what rules currently collect PCAP and disable the collection of pcap data for noisy signatures.

dgagnon by L1 Bithead
  • 1305 Views
  • 1 replies
  • 0 Likes

Resolved! Global Protect Disable Reason

Global Protect Client is setup so that users can disable VPN however they need to input a reason why they disabled the portal. I wanted to know where those disable reasons are stored.

 

Thanks 

SIDD76 by L0 Member
  • 8644 Views
  • 5 replies
  • 0 Likes

List NAT tables with static-ip translations

Hello all!

I'd like to compile a list of all my NAT tables for static-ip entries for all my firewalls, I don't know if there's a better way to do it but I'm trying to do it by running the following command on my firewalls and recording the output:


show

...

TigeRRR by L1 Bithead
  • 3259 Views
  • 6 replies
  • 0 Likes

Issue starting user in partner portal

Hi Community,

 

I want to ask you for help! One of our sales Team agent, had an issue when she try to get inside her user portal.

 

The issue said "Single sing-on error".

 

Whe want to know how can fix this.

 

I apprecciate any help!.

 

Regards,

 

S

...

9f53feb7-ea4f-49f4-a328-a5a63fcd9cdc.PNG

What to monitor via Solarwinds

Hello -

Just looking to see what others monitor for on their Pano/Palo FW within Solarwinds. Is there like a general consensus (best practices) or is it all over the place depending on requirements.

PA3250 in No Rules/Allow All mode and Public IPs

We are currently testing out/learning with a new 3250 in no rules / allow all traffic mode flowing from ISP > Palo > Cisco ASA (Being Retired).

 

We have two public ips routed to two local static IPs and those have stopped working. Would a policy need

...

jpierce by L0 Member
  • 1425 Views
  • 2 replies
  • 0 Likes

strange behavior of bidirectional NAT

hello All,

 

Today I've spotted weird behavior:

 

We have 2 static bidirectional NAT translations between UNTRUST and DMZ interfaces for public IPs. Also we are allowing certain applications in for those public NATed IPs from any IP addresses using only

...

Resolved! Recommended PAN-OS version

Hi community

 

Today I was informed by @pshanubhog that there now is an article available in the live community about the recommended/preferred software versions by PaloAlto Networks support. The article contains the preferred versions by support for P

...

Remo by L7 Applicator
  • 370893 Views
  • 11 replies
  • 15 Likes

Resolved! Redistribution host address between protocols

Dear experts

 

I set a PA firewall as an ASBR, connects to a RIP and a OSPF area with eth1/1 and eth1/2 respectively. And created 2 loopback interfaces on PA, advertised them into RIP and OSPF respectively. Then I can reach them within RIP and OSPF are

...

DexinLi by L1 Bithead
  • 2252 Views
  • 4 replies
  • 0 Likes

Resolved! Accidentally Deactivate License

Hello we have PAN that license uploaded manually before, because a network issue that we cant get the dynamic update/retrive the license.

we think that the license problem, so we want to remove the license and then add again to the firewall. but we ch

...

Email Scheduler Not Working (Urgent Action Required)

Hi Team,

 

We've configured to schedule reports for email delivery on daily basis, It was working fine without any issues but last week we had restarted the Palo Alto firewall, Since from that day we're not getting custom report email.

 

When we check "s

...

Site to Site VPN failing when IKEv2 and different PANOS

Hello,

 

 I’ve recently ran into an issue where I’m using IKEv2 preferred and the two firewalls are using different versions of PAN-OS. It will fail with “invalid sig.”. If both firewalls are the same PAN-OS version (this has been happening on 9.1.11-9

...

COlson by L2 Linker
  • 2060 Views
  • 2 replies
  • 0 Likes

Session behavior when resource limit is reached.

Hi,

I have been checking my PA-2050 with PAN 4.0.3 and I realised about new command in sesion configuration. The exact command is:

set deviceconfig setting session resource-limit-behavior  with the options bypass and drop. Default option is drop.

I had

...

  • 24197 Posts
  • 100 Subscriptions
Top Liked Authors
Labels