This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Virtual router not getting attached

2 Azure VMs managed from same panorama template. Adding a loopback interface and IP but virtual router getting attached to only in 1 VM. They are not in HA and are separate firewalls. It won't even let delete it on this firewall. getting message below

image.png
raji_toor by • L4 Transporter
  • 2508 Views
  • 1 replies
  • 0 Likes

Newbie looking for some guidance

Hello everyone. I am new to Palo Alto firewalls. We have bought many new PA-440's and I am having trouble with my very first installation. I have a site that is currently using a TP-Link AX1500 router. Very simple setup.... ISPmodem----WANportOfAX1500/LANportOfAX1500----Clients. I have tried, without success, to mimic the setup of the AX15...

Resolved! System logs view option missing

Hi,We have recently upgraded all our PA firewalls from 4.1.7 to 4.1.9. I no more see the system logs option. It used to be available earlier. I see the recent system logs on the Dashboard. How do I see system logs?

Sly_Cooper by • L4 Transporter
  • 14762 Views
  • 10 replies
  • 0 Likes

Resolved! Auto Commit Fails and prevents 10.2.0 Installation on ESXI 6.5

Hi Guys, Auto Commit Fails and prevents 10.2.0 Installation (upgrade from 10.1.x) on ESXI 6.5 on Active-Active FW where as the peer (on Active-Passive) had no issue. My question is, as per https://docs.paloaltonetworks.com/compatibility-matrix/vm-series-firewalls/vms-series-hypervisor-support we need 6.7,7.0 to run 9.1.x to 11.0.0, then, firstly...

Pras by • L4 Transporter
  • 2897 Views
  • 2 replies
  • 0 Likes

Resolved! QoS cleartext match issue

We have setup similar to as below I created/applied default QoS profiles on AE1 and AE5. However in order to be more granular I want to apply on individual subnets.As in this example we want to use separate QoS profile for 10.129.0.0/16 subnet for traffic going to internet. I have tried to add subnet under cleartext on both AE1 and AE5, with a...

image.png
image.png
raji_toor by • L4 Transporter
  • 3031 Views
  • 2 replies
  • 0 Likes

Resolved! Automate adding certificate to TS agent

Hello, I am trying to automate the configuration of the certificate part of the ts agent . My problem is to automate adding the certificate private key password in the ts agent. I have the certificate part filled in with registry keys but i have this error message when i try to launch the PanTaservice : 01/31/23 17:18:24[Error 341]: Query pass...

CHARRIER by • L2 Linker
  • 3844 Views
  • 4 replies
  • 0 Likes

Resolved! Scheduled reports not working

Hey folks. I have setup some scheduled, custom reports on one of my newer firewalls to email me daily - but the report attached to the email is coming out empty every day. I know the custom report works - if I run it manually, it returns results and I can see them - but when it's run for the daily email, it's blank. I've got *exactly* the same s...

darren_g by • L4 Transporter
  • 7992 Views
  • 4 replies
  • 0 Likes

Resolved! Asscess denied (Live community)

Hello there, is there any way of accessing this link data? http://live.paloaltonetworks.com/docs/DOC-4692 currently, I am been denied access. thanks a lot

Shadow by • L2 Linker
  • 2152 Views
  • 1 replies
  • 0 Likes

Resolved! Failed to install version 10.0.0 type panos

Hi LiveCommunity, I'm trying to upgrade my firewall from version 9.1.15-h1 to version 10.0.0. But when I click on install I get this error : Failed to install 10.0.0 with the following errors.SW version is 10.0.0Error: Minimum disk size for upgrade is 60GBFailed to install version 10.0.0 type panos. The problem is that from my point of vie...

eallieri_0-1675093994144.png
eallieri by • L1 Bithead
  • 5001 Views
  • 3 replies
  • 0 Likes

SA of the tunnel is Active

Hi Team,Can anybody tell the meaning of "What it means if the SA of the tunnel is up "?, Does it mean there is live communication in the tunnel.

Sujanya by • L3 Networker
  • 6001 Views
  • 8 replies
  • 0 Likes

User authentication errors with Active Directory

Hi, We have a problem with a FW Paloalto: Model: VM300 We have had to upgrade the functional level of our Microsoft domain and update security patches of our Domain controllers on Windows 2012R2. As of this moment we are receiving in the domain controllers the following error:"The server-side authentication level policy does not allow the user C...

Alpalo by • L4 Transporter
  • 18348 Views
  • 5 replies
  • 0 Likes

Static route path monitoring doesn't recover

Configured the path monitor on my primary ISP route per this guide, https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/static-routes/static-route-removal-based-on-path-monitoring.html# It worked great when I unplug the cable from the primary ISP CPE. The default route went to the back up ISP. Problem is the primary default rout...

Resolved! Log Forwarding

Hey, I'm using PaloAlto PA440 and I'd like to forward logs to syslog, but I don't use dedicated management (MGMT) port for administration. I configured log forwarding, but it does not work. Do I need to use dedicated management port to send logs? Is it possible to configure log forwarding on any port? Thank You!

yonkerro by • L0 Member
  • 2319 Views
  • 1 replies
  • 0 Likes
  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks