This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Firewall Config Templates(network) not showing up in Panorama

Yesterday we had to reboot one of our firewalls that is managed by the panorama. After the reboot, we noticed that half the config is no longer showing in the panorama. Everything appears to be ok locally on the firewall (panorama pushed config and interfaces) but it doesn't look like it's being managed by panorama anymore. Even though in pan...

Resolved! Given Tunnel Interface IP is wrong but still tunnel is up

I am seeing the Ip address give to the tunnel interface is wrong ( for the tunnel with AWS) , but tunnel came up and working without any issue.Can anybody suggest on this. Would the IP address which we will give to the tunnel interface would not matters.

Sujanya by • L3 Networker
  • 7034 Views
  • 1 replies
  • 0 Likes

Resolved! Behavior of the 3 possible options -SIP flow with TCP - SIP TCP cleartext

Hello good afternoon everyone LiveCommunity. For an environment with TCP-SIP with the ALG disabled at App "SIP" level and/or with AppOverride, I would understand that these options should no longer generate any noise, problem or unwanted behavior no ? PAN-OS 9.1.14 - Layer 2 FW - HA https://docs.paloaltonetworks.com/pan-os/9-1/pan-...

Metgatz by • L4 Transporter
  • 9004 Views
  • 2 replies
  • 0 Likes

How to get/send DNS logs to on-prem SIEM -- DNS Proxy + DNS Security

Hello Community! Wondering if anyone has this scenario / has experience with retrieving DNS security logs... Remote Site Firewall setup: - DNS Proxy Enabled (Rules direct internal domains to internal DNS servers across SDWAN, all other DNS request go out local internet to 8.8.8.8) -Firewalls have DNS Security Subscription Problem: We previou...

SWITCHING PANORAMA VM FROM LEGACY MODE TO PANORAMA MODE failing

- We are trying to switch the Panorama device from Legacy mode to Panorama mode SWITCHING PANORAMA VM FROM LEGACY MODE TO PANORAMA MODE - https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPTzCAO - Currently running on 8.1.x version in Panorama Legacy mode on VM and need to upgrade the system disk to meet the requirements...

Param_Upadhyay_0-1677708171809.png

Resolved! Network Throughput Graphs are incoherent in PA-220

Hi, We are experiencing an issue with the PA-220 network graphs displayed in one of our sites. We know that the router in front of the firewall delivers a 90 Mbps (Megabit per second) max throughput. This measure has been verified extensively. However when trying to visualize the traffic received by our test machine from the firewall we...

f4lkon_0-1677147475652.png
f4lkon_1-1677148310474.png

Resolved! Unable to change password on LocalDB user, when added to AuthProfile

Hi People! I'm using PanOS 10.2.2 on a PA-440. I have created a few LocalDB users and added them to a group. Then i've created an authentication profile and added this group to the allow list (also tried with "all"). Since these local users are also the fw administrators, i've created the same users under Device/Administrators and linked the app...

IPsec tunnel on passive FW and Solarwinds alert

Hello,We are currently running pair of 3260s in HA. When the IPsec tunnel goes down on primary FW, we get alerts from Solarwinds that both tunnels are down on primary and passive Firewalls. Is this normal condition? If so why would I receive alert on passive FW?Thanks

understand thermal check commands

Need help with understanding output for this. show system state filter env.* | match thermalenv.s1.thermal.0: { 'alarm': False, 'avg': 55.000, 'desc': 6220 Core Temperature, 'hyst': 4.500, 'max': 95.000, 'min': 5.000, 'notified-avg': 55.000, 'samples': [ 55.000, 55.000, 55.000, ], 'shutdown': False, }env.s1.thermal.1: { 'alarm': False, 'avg': 39...

fatboy1607 by • L4 Transporter
  • 19586 Views
  • 11 replies
  • 0 Likes

Resolved! Clone a Device Group?

Hi Guys, I have Panorama with a few device groups; how do I clone one of them from GUI so I can do testing without impacting a production device group? Thanks

tinhnho by • L3 Networker
  • 7304 Views
  • 1 replies
  • 0 Likes
  • 24452 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks