This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Unable to change password on LocalDB user, when added to AuthProfile

Hi People! I'm using PanOS 10.2.2 on a PA-440. I have created a few LocalDB users and added them to a group. Then i've created an authentication profile and added this group to the allow list (also tried with "all"). Since these local users are also the fw administrators, i've created the same users under Device/Administrators and linked the app...

IPsec tunnel on passive FW and Solarwinds alert

Hello,We are currently running pair of 3260s in HA. When the IPsec tunnel goes down on primary FW, we get alerts from Solarwinds that both tunnels are down on primary and passive Firewalls. Is this normal condition? If so why would I receive alert on passive FW?Thanks

understand thermal check commands

Need help with understanding output for this. show system state filter env.* | match thermalenv.s1.thermal.0: { 'alarm': False, 'avg': 55.000, 'desc': 6220 Core Temperature, 'hyst': 4.500, 'max': 95.000, 'min': 5.000, 'notified-avg': 55.000, 'samples': [ 55.000, 55.000, 55.000, ], 'shutdown': False, }env.s1.thermal.1: { 'alarm': False, 'avg': 39...

fatboy1607 by • L4 Transporter
  • 19150 Views
  • 11 replies
  • 0 Likes

Resolved! Clone a Device Group?

Hi Guys, I have Panorama with a few device groups; how do I clone one of them from GUI so I can do testing without impacting a production device group? Thanks

tinhnho by • L3 Networker
  • 7188 Views
  • 1 replies
  • 0 Likes

Resolved! Only partial of template got pushed to the firewall.

Hi Guys, I have a template in Paranoma and I pushed it down to a firewall, the firewall could only get 80% of the template. The Panorama didn't complain as there were no error messages after the push. The firewall is currently missing interfaces' settings and virtual router settings that I have set up on the template. The Policies and Object...

tinhnho by • L3 Networker
  • 4742 Views
  • 6 replies
  • 0 Likes

Resolved! Unable to change hardware udp session offloading setting as false

  Hello all,I am using PA-440 on the PAN-OS 10.2.3-h4. Due to performance degradation issues, hardware session offloading and hardware udp session offloading was changed to false through the following commands. > configure # set deviceconfig setting session offload no # commit However, hardware session offloading has changed normally, but...

Screenshot 2023-02-28 at 5.36.56 PM.png
Screenshot 2023-02-28 at 5.37.22 PM.png

Resolved! IP Wildcard Address not supported in Address Groups?

I am trying to make an address group that consist of wildcard addresses but I get this error: vpn30-wc -> static 'vpn30-v110-wc-1' is not a valid reference vpn30-wc -> static is invalid vpn30-v110-wc-1 is an IP Wildcard vpn30-wc is a new empty address group. Is this not supported?

BBartik by • L2 Linker
  • 4282 Views
  • 1 replies
  • 0 Likes

Resolved! Maximum number of routing entries on a PA 5020 running 4.1.10

Hello,Does anyone know what's the maximum routing table entries is on a PA 5020 running 4.1.10 ?I ran into a limitation with a PA 500, where it exceeded > 1K+ routes and had to change how routes are re-distributed on the routers.Thanks in advance.

wmoy by • L0 Member
  • 6678 Views
  • 4 replies
  • 0 Likes

Suggestions or help needed: forwarding broadcasts with a custom ip-helper

Hello all, we have recently started using interactive boards that can display the screen of a connected client in various ways: airplay, chromecast, etc. and also by means of a manufacturer's own tool. The tool first creates a list on the client of all boards accessible on the local network. To do this, it sends broadcasts on UDP port 6618 to th...

Pieninck by • L0 Member
  • 2866 Views
  • 1 replies
  • 0 Likes

Explore App - can no longer access it

Has anything changed to the Explore app lately? Just recently I was able to access it for clients that had it, but now it is not showing up in the Hub and when I visit it directly via old link I get "You do not have app: logging_service in the account". Was there a change recently for the hub/apps/Explore app?

rufat87 by • L2 Linker
  • 1623 Views
  • 1 replies
  • 1 Likes

map users into groups in a multi-forest AD design

Hello Community! I´m trying to find a solution for the following problem: I have two different forests created in the same Active Directory: Forest_1:subdomain_1.domain_1.com Forest_2:subdomain_2.domain_2.com There is a trust between the two forests I have also the universal group_X in subdomain_1: subdomain_1\group_X I added the Use...

Carracido by • L4 Transporter
  • 2941 Views
  • 1 replies
  • 0 Likes

Set zone to "any" in CLI

How can I set the zone for a rule to any in the CLI? If I delete the from / to lines it sets it to "none" which is not valid. If I set it to "any" then it thinks "any" is the name of the zone which is also incorrect. Any ideas? Thanks!

BBartik by • L2 Linker
  • 2438 Views
  • 1 replies
  • 0 Likes
  • 24403 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks