This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

advertise inter-vr route to BGP

Hi, I have RBVPN with BGP and I need to advertise routes that have a next-hop to another VR. They do not seem to be advertised to BGP (currently I advertise only connected routes, not static). Is there a simple way to add these routes from another VR to BGP?

MiikaR84 by • L0 Member
  • 1599 Views
  • 1 replies
  • 0 Likes

Recover Deleted Customer Support Portal account

Anyone have any idea how to create a user account with an email that was already used prior? I created an account but messed up and deleted it. Unfortunately I did not mess up the email so now when I try to create the account again, it says the email already has an account and cannot be used and cannot log in. I cannot change the email address...

Resolved! PA-440's, and Redundancy

Can you setup/configure 2 PA-440's inter-connected with one being a failover for redundancy in case the other bricks? Or only Dual ISP redundancy using Static Routes Path Monitoring feature, for Traffic failover? Is it even possible to setup 2 PA-440's configured identically with one a hot(plugged in) failover? Forgive my terminology.

Group of Regions / Region Groups

Is there a specific reason that this feature is not yet available? It's a bit of a pain from a readability perspective to have a massive list of Regions tied to multiple policies, to say nothing of having to update multiple policies which may reference the same set of regions. It just seems as though "region" should just be another thing you can...

charlesw by • L1 Bithead
  • 5199 Views
  • 3 replies
  • 3 Likes

PA firewall dropping fragmented packets

Hello, We've seen Netflow Traffic being dropped by the Palo Alto firewall based on the packet captures taken. No zone protection profile is set. DF bit is set to zero. MTU settings are fine and fragmented packets are less than 1500. However, FW is not reassembling the packets. Global counter shows: IP Fragments entry insert failure. IP Fragemen...

Netflow.jpg
Farzana by • L4 Transporter
  • 7178 Views
  • 1 replies
  • 0 Likes

About Captive Portal

Hello, I followed the link below to configure Captive Portal https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqbiCAC When I finished, I found that I was able to successfully browse the Yahoo! However, when I wanted to browse google I found that I couldn't do it How do I set this up to solve this problem ? Any help...

young19918_0-1677734752579.png
young19918_1-1677734840519.png

Panorama drops devices from device groups

Panorama shows that all devices have "No device group assigned" in the Managed Devices, Summary screen, but the devices look fine in the Device groups screen.This is also resulting in being unable to commit changes to the firewalls. This issue happened earlier on today, and went away with a reboot of Panorama, but appears to have come back. What...

Palo Alto Firewalls - Azure deployment design for regional resiliency

Hello everyone! I'm new to the Palo Alto Firewall and I've been reading the documentation on securing applications in Azure using Palo Alto's firewall here https://www.paloaltonetworks.com/resources/guides/azure-architecture-guide. While going through the documentation, I noticed that it talks about achieving firewall resiliency in Azure usin...

Telemetry

Hello - How often is telemetry data sent and can I change the timing? There is this doc, but I'm not exactly sure what it is telling me: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/device-telemetry/device-telemetry-collection

Resolved! Global Protect authentication happened two time while using RADIUS

Hi Team, We have faced the Global Protect authentication that happened two times while using the RADIUS server. First, I am trying to connect to VPN and enter the user name and Password after the OTP has asked then entered the OTP after, again the user name password is asked then OTP is provided after VPN was connected. We need to avoid the ...

Resolved! Why have I been sinkholed?

I former colleague just notified me that he couldn't get to my site https://normative-technology.org/ because it is CNAMEd to sinkhole.paloaltonetworks.com . I understand what a DNS sinkhole is (in fact, I'm using them myself), but not why my domain ended up sinkholed by Palo Alto Networks. Also, I don't find any policy documents relating to th...

KjetilK by • L0 Member
  • 3943 Views
  • 2 replies
  • 0 Likes

SMC SSD Failure Detection : Press F1 to Resume

I recently stumbled upon this error and found very little documentation on the subject that I only found after the fact. On the SMC of the 7000 series firewalls, there is a SSD. This SSD will fail over time. I found out when rebooting after an upgrade in a remote DC that took hours to get someone on site with a console cable. The chassis was sit...

Kocian by • L1 Bithead
  • 7543 Views
  • 4 replies
  • 0 Likes

Resolved! No Super User to authorise my Support Portal account

Hello. I need to download the PaloAlto Terminal Services user-id agent. To download this agent, I need to have a PaloAlto Customer Support Portal account. I went through the process of setting up a Support Portal account, using my device serial number and customer number. Unfortunately, I get a message saying my account expired or was not yet ...

  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks