This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

MGMNT Slow and Serching logs slow and Syslog server issue.

Device Model: PA-5220 HA Mode Active-standbyPAN-OS 10.0.0The questions below as I couldn't find anything on Palo Alto website. Recently we have upgraded Palo Alto to v10.0.0. 1. Web management interface became very slow and searching logs takes very long time to load.Kindly advise if there’s any solution for that. Can we disable services of some...

SDWAN Shus Down an interface every few minutes

SDWAN.1 is Xfinity comcast no issue ( cable modem 500 down 30 up) SDWAN PROFILE. set to ethernet even though it is a cable modem circuit with an ethernet handoff SDWAN.1 TIER 1 ISP. Bouncing every few minutes based on SDWAN probing. SDWAN PROFILE Tried AGGRESSIVE vs RELAXED Tried ETHERNET vs Fiber link. The Tier1 carrier and I have verifi...

SSL inspection issues with PAN-OS 10.2.3

Good day, Hoping to get some insights on a particular issue we're having. I've managed to get SSL inspection running using a test server: - uploaded the private key and certificate, and the CA's public certificate - created a decryption profile and decryption policy While it tested OK, i can't seem to get it running on our production serv...

PA820 SFP issue

Hi, We are having problems for detecting SFP for a PA-820 version 10.1.6. We tried with these two SFPs (compatible with PA): SFP PAN-SFP-CG SFP AVAGO AFCT-739SMZ The SFP is working properly but its not being identified running this command: admin@(active)> show system state filter sys.s1.p6.phy sys.s1.p6.phy: { 'duration': 3600, 'last-sa...

BigPalo by • L4 Transporter
  • 1804 Views
  • 1 replies
  • 0 Likes

Split tunnel for Teams when client VPN session GlobalProtect

Hello Team, I want to separate or split tunnel MS Teams. It goes on and off at any given time and is not running for all the users once connected remote. Once you connect to the site it disconnects TEAMS (not for everyone). Very important for our company meetings. Could someone help me with the steps or documentation for that please. PA 220...

Palo Alto

Friends, does somebody face an issue with that error on AutoAssistance? Critical Hardware DIMM general protection fault: Further review of the logs is recommended to determine whether an RMA should be issued Does smb face that issue? Please note you are posting a public message where community members and experts can provide assistance. S...

Resolved! Palo Alto firewall vs Web Proxy

Hi folks, I am trying to understand what references mean when mentioning Palo Alto firewall as a web proxy or any reference to it that way.I mean, from what I gather, the PA does not cache web requests like a web proxy product would, or rewrite URLs, or have other traditional web proxy type features. Unless I am wrong? Could it be that the term...

OMatlock by • L4 Transporter
  • 23656 Views
  • 8 replies
  • 0 Likes

SDWAN Rouitng

2 ISP circuits added as SDWAN links You can not 0.0.0.0 / 0.0.0.0 route with the same metric of 10 This one is Metric 10 one is metric 15. How do you use both circuits?

Commit scope is unavailable when a full commit is required

Hi Team, Let's see if you can help me with this behavior, In Panorama 9.1.9 the following message is displayed when trying to commit: "Commit scope is unavailable when a full commit is required" I see that there is pending configuration to push the devices and I decide to "Push", not leaving pending to apply any configuration on the devices, ...

MS-ISAC TAXII Feeds

Is anyone successfully consuming TAXII feeds from MS-ISAC, specifically, their feeds from taxii-pilot.cisecurity.org? The miner shows success and there are log entries for indicators, but there are no indicators in the counters or graphs.    

2021-06-24 08_21_01-Clipboard.png
2021-06-24 08_22_31-Clipboard.png
2021-06-24 08_21_59-Clipboard.png
ngagne by • L1 Bithead
  • 8884 Views
  • 8 replies
  • 0 Likes

Google meet/ hangout Stun servers aged-out

We have noticed an issue especially with Google Meet/Hangout when we often get one way audio. I can see from the traffic logs that Stun servers are showing aged out and the application is stun. However it is using a non standard port 19303 I suspect this is the cause of the issue. How can I ensure the traffic is correctly identified and al...

  • 24460 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks