General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! L2 Over L3 with VXLAN protocol

Hello, Is it possible to configure a VXLAN tunnel on a Palo Alto 3220 (running PANOS 10.2.3)? I.e. is L2 over L3 tunneling using VXLAN protocol possible? If so, is there an example configuration you can point me to? Thanks!

brenna by • L0 Member
  • 8488 Views
  • 2 replies
  • 0 Likes

blocking apps on google chromecast

Hello, Looking to block apps on a new Google Chromecast all apps would be great but haven't been able to block AppleTV, HBOMax and ESPN. I've put appletvplus and hbo into our blocked apps rule but they still open and able to be accessed. Any one succesfully blocked Chromecast apps? Thanks

mlaporte by • L1 Bithead
  • 3628 Views
  • 2 replies
  • 0 Likes

Where to download update for PA-2050 for learning purposes.

I have been given a PA-2050 to play with, and get my hands dirty, learning PAN, etc. Where do I go find the latest supported image for it? https://support.paloaltonetworks.com/Updates/SoftwareUpdates/ doesn't have the PA-2000 series listed. It has PA-200, and then PA-3000, PA-4000, PA-5000 and the PA-VM series.Should I even bother? Should I j...

Fan_Tai by • L0 Member
  • 4906 Views
  • 5 replies
  • 0 Likes

User cannot connect to Global protect portal.

The error message on this users GP client says they have an issue with they're certificate. The helpdesk apparently installed a certificate but I am not sure which one or where exactly. Now its telling me it cant access the portal at all. I want to doublecheck the user has the correct certificate. I know where the certs are in the palo alto and ...

Global Protect on Linux not working

I've tried GP on both Ubuntu 22.04 and AlmaLinux.I got the GP app from University of Texas at Dallas. Neither worked. I got a SSL Handshake error.Anybody with a successful experience to share? Cheers

Resolved! DNS over TLS in 10.2.4

Hi All it seems like late last year DNS over TLS feature has been added to Palo Alto firewalls However I am having issues understanding where it needs to be configured, I did read the guides but still unclear So my external dns is 1.1.1.1 and I use DNZ proxy, 1.1.1.1 does support dns over tls but for that a domain needs to be configured in...

nevolex by • L3 Networker
  • 4066 Views
  • 2 replies
  • 0 Likes

warning msg on CLI

Hi, While logged into the CLI on our PAN-OS, received the following error messages: 2016-07-20 12:17:16.783 +1000 Warning: pan_hash_init(pan_hash.c:112): nbuckets 100 is not power of 2!2016-07-20 12:17:16.783 +1000 Warning: pan_hash_init(pan_hash.c:112): nbuckets 100 is not power of 2! Just wondering if these are anything to be concerned about?

fmustafa by • L1 Bithead
  • 7574 Views
  • 3 replies
  • 0 Likes

Changing interfaces

What are the steps to move the global protect VPN portal and gateway from one interface to another on the Palo Alto firewall? We are wanting to move it to it's own interface.

Gary-P by • L0 Member
  • 2147 Views
  • 2 replies
  • 0 Likes

SSL inbound inspection

We want to apply inbound SSL inspection and our certificate from Digitcert and based on this document https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEZCA0there is a note says "Because SSL certificate providers such as Entrust, Verisign, Digicert, and GoDaddy do not sell CAs, they are not supported in SSL Decryption."...

Resolved! how configure a vlan with dhcp

I have configured my vlan in different ways with subinterfaces however I connect my switch or my laptop to the port and it doesn't work. steps i followed:1. Create subinterfaces and assign a segment to it.2. Add these subinterfaces to the virtual router.3. add dhcp to the subinterfaces.4. create firewall rule for internet outbound from zone and ...

Fipaterm by • L1 Bithead
  • 10798 Views
  • 1 replies
  • 0 Likes
  • 24482 Posts
  • 126 Subscriptions
Top Solution Authors
Labels