General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

GlobalProtect 6.0.5 doesn't detect Symantec endpoint protection HIP data

GP version (6.0.5) doesn't detect Symantec HIP data on the client PanGPA.log: <ProductInfo> <Prod name="Symantec Endpoint Protection" version="" defver="" prodType="3" engver="" osType="1" vendor="Broadcom" dateday="" dateyear="" datemon=""> </Prod> on the server HIP match: Rolled back to previous version (5.2.12) then it...

2023_02_15_16_29_36_Firefox - Copy.png
2023_02_15_16_30_48_F - Copy.png
LAS by L2 Linker
  • 2714 Views
  • 2 replies
  • 0 Likes

Resolved! Slow File Downloads over a new PA3220

I recently installed a new pair of PA3220s at one of our international remote offices in India to serve as basic Internet Edge Firewalls that are linked to a 300mbps internet circuit. The PA's have 2x Portchannel links each with sub-interfaces that terminate down to 2x C9300 Layer 2 Core switches ( Core A and Core B), and from there, we have abo...

Suggestions

Hi Not sure where else to place these and talking to the support engineer is a bit of a black hole. * one the CLI allow for lines which are comments - like any thing after a # is a comment - this allows me to have config files that are text files that I can add comments to * allow policy lines / rules that don't do anything apart from being ...

Policy creation/management

Hi Folks, We have a running sites where firewall running and managing through panorama. clients building a new sites and new firewall deployments however panorama will be remain same and policy will be the same just few sub-nets needs to be changed. there are many policy in exiting firewalls/panorama. Is there any way to copy existing policy i...

Resolved! Multi-Factor Input Code Field Displays incorrectly

PA 3220 V 10.2 When setting up and testing MFA if you choose SMS/Input Code when the page displays the box is one field only as shown in the browser picture (Chrome/FF/IE. It doesn't show your characters being typed which is hard for user. At first we thought is wasn't 'modernized' but if you download the response page and then open it as .htm...

sallen by L1 Bithead
  • 3310 Views
  • 1 replies
  • 0 Likes

OTP authentication with GlobalProtect

Hello all,The customer has an inquiry about OTP authentication when logging in to the GP after booting the PC. When I log in again after disconnecting, I can log in without OTP authentication (session authentication is maintained), so is there any way to set up OTP authentication every time I disconnect? 

The authentication method is Azure SAML...

Resolved! How do you see what cipher suites are enabled for Global Protect?

How can I view which cipher suites are currently enabled for Global Protect SSL connectivity? I see in the document below which are supported but now how to view which are enabled/ready for negotiation nor how to disable/enable specific ones. https://docs.paloaltonetworks.com/compatibility-matrix/supported-cipher-suites/cipher-suites-supported...

User Mapping - AD access denied

Hello all, You are using Microsoft Active Directory, but you receive the following error log: Useridd.log > Error: pan_user_id_win_wmic_log_query(pan_user_id_win.c:1603): log query for AD_3 failed: NTSTATUS: NT_STATUS_ACCESS_DENIED - Access denied 2023-02-08 06:54:00.114 +0900 Error: pan_user_id_win_get_error_status(pan_user_id_win.c:128...

Resolved! Global Protect Support for Sequence Authentication with Local y SAML ( Azure-AD )

Global Protect Support for Sequence Authentication with Local y SAML ( Azure-AD ) Hello Live comunity, good afternoon, as I always say, thanks for the good vibes, for your time and for the collaboration. Is it feasible to use Global Protect, with a sequence authentication profile that allows SAML authentication ( Azure AD ) and local users ?...

Metgatz by L4 Transporter
  • 2578 Views
  • 1 replies
  • 0 Likes
  • 24397 Posts
  • 123 Subscriptions
Top Solution Authors
Labels