General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Strange behaviour via Palo Alto Firewall.

Could someone explain why this site would fail via our firewalls, it works fine local and split tunnel. I would imagine it's to do with encryption levels as wireshark shows a few cypher spec changes during the handshake.. FYI.... SSL Proxy / decryption is switched off for this site and aplication is set to any and is classified as education/low ...

Mick_Ball by • L7 Applicator
  • 3993 Views
  • 6 replies
  • 0 Likes

palo alto block page not showing

Running panos 10.1.8 on vm-300. a blocked https page gives user -This site cannot be reached rather than palo block page notification. Is this because ssl decrytpion is not enabled and is required to get block page notification for https url which are supposed to be blocked via url filtering.

PA440 not shuting down instead getting rebooted after sometime .

Hello I am trying to shutdown the device using CLI and GUI but it is getting reboot after some time . Click on Device tab > Setup link > Operations tab. Click on shutdown device under device operation shutdown command (request shutdown system) in the CLI. PAN-OS 10.2(10.2.3-h4), Please help me with the issue .

Resolved! Creating a rule

I am creating a security rule to allow url whitelist but i m facing issue to commit Push the rule.One column is Audit comment is not taking any text.Please suggest what should i do.

Khushnood_0-1685467781544.png

LACP betweeb PA3400 and Cisco Switch

I have config LACP between PA3400 and Cisco Switch everything work fine implement test on standalone mode Cisco eth1/1 (po1)<----> PA eth1/1 (ae1) Cisco eth1/2 (po1)<----> PA eth1/2 (ae1) All traffic can use normally until we test shutdown or unplug one of member on firewall . Result : traffic is dropped 1 timeout My question : this...

Limiting Access to Office365 only

Hi All, So we have a PA FW with PANOS 9.1.x We have a requirement for a specific inside vlan to have internet access to office365 only (teams,outlook etc etc).. tried with app-id using the office (365-enterprise-access and consumer) access to no avail, Suspect this did not work due to the FW not able to decrypt the ssl traffic. we also do not ha...

Ants by • L1 Bithead
  • 4320 Views
  • 4 replies
  • 0 Likes

Wildfire WF-500 configuration with 2 nodes in HA

Hi Team, I have a query regarding the HA configuration in WF-500 Private cloud for 2 devices in the cluster. I have found the document if there are multiple devices/nodes in the cluster. https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-appliance-clusters/wildfire-appliance-cluster-resiliency-and-scale If there are 2 W...

How to forward DHCP logs to syslog server (SIEM)

Does anyone know how to set up forwarding of DHCP logs (leases being issued mainly) from a PAN device operating a DHCP server to a SIEM via syslog? I've already configured a log forwarding profile but I'm not seeing the appropriate DHCP lease logs in my SIEM.

Situations that trigger PAN-197832

Hi all, I have a question about PAN-197832. [PAN-197832] PAN-OS 10.2.4 Known Issues-----GCP BigTable might hang when GCP CBT CLI commands are issued in cases where google-base traffic is erroneously classified as unknown-tcp.----- What causes google-base traffic to be classified as unknown-tcp? Also, does this misclassification occur frequen...

MasaW by • L2 Linker
  • 1799 Views
  • 1 replies
  • 0 Likes

Resolved! URL Filtering: Can't Block website when user use Google Cache

Hello, all I want to block a website whe user user google cache or yotube,facebook. In the past i tested everything ok, Palo Alto could block when user use google cach or youtube. But today, Palo Alto can't block website when user use google cache ( But can block youtube,facebook ) Pls help me know why!! Palo Alto Block website www.youtube.com P...

Resolved! Dataset microsoft_windows_raw: Facing Server Error XDR XQL API Query

Hello Everyone, I am trying to fetch logs using xdr_data dataset and I was able to fetch it successfully. However, when I tried microsoft_windows_raw, it throws me server error. As per the document I referred, https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-XQL-Language-Reference/Datasets-and-Presets , I should be able to use...

  • 24482 Posts
  • 125 Subscriptions
Top Solution Authors
Labels