This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Redirecting certain websites to backup PA?

Hi, Is it possible to redirect websites to route to our secondary data centre rather than our primary? There is a PA850 at each of the sites, but for some reason our main data centre is being 403 Forbidden blocked, or being blocked for being behind a "vpn" which it isn't. Basically I just want to set it up so if people go to www.example.com ...

Tadija by • L0 Member
  • 2314 Views
  • 3 replies
  • 0 Likes

Resolved! Which weak cipher suites for SSL/TLS to delete

Hi All, I recently had a pen test return the following results: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) ECDH secp256r1 (eq. 3072 bits RSA) FS 256 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) ECDH secp256r1 (eq. 3072 bits RSA) FS 128 TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d) WEAK 256 TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c)...

LSVPN Satellite fails to authenticate

Hello I'm struggling to setup a (not so) large scale VPN solution with one PA-820 ha pair and three PA-410 satellites. I'm using local CA in PA820. At some point I had some success - portal connection succeeded and certificates were issued to satellite, however gateway connections didn't worked. Then I realized that I leaved local CA lifetime to...

GeorgeAPH_0-1684838429150.png

Strata , Prisma & Cortex || Difference

Hi, what is the difference b/w Strata, Prisma & cortex, as Strata is only used for Enterprise solution? Prisma for cloud ? in official documentation Strata have also cloud solution then what's the function of Prisma? Strata included specific models of firewalls & Prisma included different models of firewall? How these above three ty...

Khalid by • L0 Member
  • 12998 Views
  • 3 replies
  • 0 Likes

PANOS Integrated UserID with WINRM

Hello, I am trying to configure PANOS(10.1.8) Integrated UserID with Wndows AD 2016 (with Kerberos). I am getting "Access Denied" status under User Mapping --Server Monitoring I have validated that user is part of below security groups on AD Distributed COM Users Event Log Readers Remote Management Users Server Operators I see below log...

Resolved! session end reason resources-unavailable for all traffic

Hi,GuysThe customer's network recently experienced an outage, and found all the session end reason was resources-unavailable ;I exec the comand " debug dataplane pool statistics" and found there is a parameter in the software pool called Regex Results that has been exhausted. Compared with normal firewalls, this value should not be reduced. I...

220 activation

It was discovered recently that we have a 220 in use that the Support contract was never activated. And now because the 220 is End of Sale we are unable to purchase a new Support contract. Is there a way to get this unit activated? We have a lot of 220s that have support contracts that come to term at the end of this year, will we be able to r...

Reason for Sudden Reboot of PA-820

1. Need to get the confirmation on the reason for the sudden reboot of the PA-820 device which is in High-Availability state. 2. Only the Primary Unit has faced sudden Reboot but Secondary did not, Checked for the power adapter of the Primary unit but it was fine. 3. Timestamp of the sudden reboot on a primary PA-820 (HA-Active) unit is on 9/5/2...

Purushotham_0-1684750533621.png

Palo Alto and Menlo Integration

Hi all, Does anybody known how to integrate Palo Alto with Menlo Security Solution ?The goal is to transparently redirect HTTP/HTTPS traffic to Menlo appliance for specific URL Categories... Any idea ?? Regards, HA

Maximum Access Domains Per Admin Panorama

Hi guys, What is the maximum number of access domains you can configure per admin? I tried adding a 26th access domain to an admin, but was presented with the following error. admin-bar@panorama01# set mgt-config users rus permissions role-based custom dg-template-profiles 2933-Officenet2 profile DG-defaultServer error : 2933-Officenet2 constrai...

Resolved! Getting more restrictive in rule application and use of application policies - best approach?

We recently used Expedition to migrate our ASA and some rules from an older PA-3020 over to a PA-5220. It was rather involved (to me) and I had taken this project over after someone had started it. Since our ASA did not have any concept of Applications many of the rules from our ASA were brought over as-is with specific port definitions in the...

Anyone running PAN-OS 11.0.1 on a PA-440?

I am for that matter because I need de PPPoE feature on a sub-interface. But I have noticed that one of the LEDs on the management interface is not working. Could this be a software issue? Regards, Han.

Han.Valk by • L2 Linker
  • 2029 Views
  • 2 replies
  • 0 Likes

Pan-OS CLI Keyword Highlighting in SecureCRT

I use SecureCRT to manage SSH connections to Pan-OS CLIs on our NGFWs, and this software has the ability to highlight keywords, including regex(s). However, after a couple hours of Google-fu, I found user-made Cisco CLI templates but cannot find any for Pan-OS CLI. Does anyone have this feature configured that would be willing to share a templat...

  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks