This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Panorama HA secondary panorama diferent PSK key

Hi All, I have created a panorama HA cluster through which I manage a firewall in SD-WAN technology. when the active panorama is no longer available and the secondary panorama becomes active, I want to release templeate to the device, it makes me revert on the device. I have identified that the problem is when sending template changes from t...

Using Ansible to export stats-dump with specific time range

Good morning, LIVE Community. I'm trying to export stats-dump from a remote PaloAlto device to my local computer using Ansible. Prior to trying out Ansible, I'd usually use this command on the remote device to export stats-dump to my computer: scp export stats-dump remote-port <remote_port>start-time equal <YYYY>/<MM>/<DD&...

agatha by • L0 Member
  • 1944 Views
  • 1 replies
  • 0 Likes

Workflow interruption by wa_3rd_party_host_64.exe interfering with app focus

When I am working in ANY other program I find many times my workflow is being interrupted and current program looses focus when wa_3rd_party_host_64.exe has started. Is anyone else getting a problem like this? How often should my active vpn be triggering wa_3rd_party_host_64.exe ? See attached EVERY time I see these processes current prog...

ScottQ by • L0 Member
  • 4318 Views
  • 1 replies
  • 0 Likes

Execution error on a playbook solved with job

Hi all, I am using XSOAR 6.10.0Activity I am performing:Running a playbook (consisting of 3 tasks):1) task that invokes an automation that from an API call generates the response in CSV format.2) Send-mail task, from the attachIDs and attachNames of the CSV file generated by the previous task sends it as an attachment to the email.3) Closes the ...

MF762 by • L1 Bithead
  • 2107 Views
  • 1 replies
  • 0 Likes

Resolved! Panorama and PA-440 DNS proxy

Greetings, I am running Panorama and PanOS 10.2.3 with 30 PA-440s running sdwan. I'm trying to configure DNS proxy for a new business requirement and am having issues. The config for dns proxy is different from Panorama to the PA-440. On Panorama you create a DNS server profile and tie that to the DNS proxy. On the PA-440 you configure t...

Resolved! PA-HA Server - Drive Error

we are getting a commit error and HA peer end status "Non-functional drive error detected". Then we suspended the Secondary firewall after making the local device function it's showing a passive state and now it's working as expected

SANKETM by • L1 Bithead
  • 5273 Views
  • 1 replies
  • 0 Likes

Issues with phase 1 of ipsec

Hi, i've been having an issue with getting the phase 1 of our ipsec tunnel to a customer up who is using a watchguard firewall.As far as i can see our phase 1 settings match up, but i keep getting the no proposal chosen error in the logs.I've attached screenshots of the settings and also a packet capture receive result. I've been a bit stumped a...

User names with two different domain prefixes - inconsistent rule application

I'm semi-reposting this because it didn't get any bites in another topic/discussion area and this seems to be a lot busier. I'm having an issue where are users are showing up in the logs as both domainname\username and domainname.com\username. Whenever I show the user names and group listings on our firewall from the CLI they show as domainn...

Domain config on Split Tunnel

Hi All, I have excluded few of the domains in Split Tunnel config. I am not able to verify if the split tunnel is working curretly. If we check the route print we are not seeing any difference in the route table. Is there any way i can test this or confirm the split tunnel is working? Also is it necessary to * before the domain? For example *pro...

Bandthwidth Issue

We are getting hardly up to 6 Mbps download & 60-70 Mbps upload. The problem is with download. When we connect the laptop directly with Tata, it is showing full bandwidth during speed test. But while connecting through Firewall, the download speed is showing between 1-6 Mpbs.

SANKETM by • L1 Bithead
  • 1238 Views
  • 1 replies
  • 0 Likes

USER-ID Rules

Hi Team, We have implemented SAML authentication for GP users. Since then the Source User logs are being seen as email IDs and not with the SAMACCOUNTNAME. So the rules implemented with the LDAP user groups are not working. Is there any way we can get this sorted? Regards, Sanjay S

Resolved! Sub-Interface Configuration

Hi All, Please help. I never configured Sub-Interface in PA. There is a new requirement to configure a sub-interface under already configured interface. So my doubt is how this Sub-interface if we already configured the physical interface with the IP address? What is the use of Sub-interface is it similar to the VLAN interfaces in Checkpoint and...

Resolved! Editing server profile removes the credentials from server settings. Is this a defect?

Hi, In the LDAP server profile section, if you open an existing profile and edit any field (example even an ip address) , it automatically removes the account credentials from the server settings for all servers defined in the server profile. Simply editing an entry like an IP address for one server should not remove credential information for...

Param_Upadhyay_1-1684260564359.png
Param_Upadhyay_2-1684260697074.png
  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks