General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! XFF When Using DNS Proxy Object

Hi All,

 

I am using DNS proxy and as such all the threat logs that are to do with DNS requests only have the firewall IP in them, all users are using Global Protect and I have enabled x-forwarded-for headers for user-id.

 

Is there anything else that I

...

PA-460

Hi,

 

I need assistance for PA-460 HA1 and HA2 connectivity. PA-460 doesn't have dedicated HA1 and HA2 ports. And please let me know do we need dedicated links for HA1 and HA2 between two devices ?

 

Regards,

Suresh

surkumar by L0 Member
  • 2040 Views
  • 1 replies
  • 0 Likes

Help With Configure PA-220

I am trying to build firewall from scratch. Our use case is to secure 3 servers with separate DSP connected to PA-220. We do not have any managed switch or router between ISP to firewall. It is direct from modem to firewall.

 

Can anyone help with this

...

Traffic monitor incomplete

I've got a new Global Protect portal/gateway.  When I get connected to the gateway, I can see the connection via the GP monitor.  Then if I go the to traffic monitor and search the source range 192.168.203.0/24 I only get traffic from previous testin

...

danoman2 by L3 Networker
  • 2264 Views
  • 4 replies
  • 0 Likes

URL FIltering

I was curious if anyone knows why even when traffic is flagged as a threat by URL filtering there are still packets being sent and received?  

Resolved! Certificate dependancies

Hi,

 

We use a lot of certificates within our Palo Alto/Panorama setups.

 

Is there a way to get a spreadsheet/PDF etc... to tell me what though certificates are attached to providing services for etc...?

 

Is there a way to link certificates to what they

...

IPv6 and IPv4 addresses in same security rule?

is there an issue with doing this - I have a rule set to match any address except one particular IPv4 subnet (ie using the negate function) - works fine.

I added an IPv6 prefix to the rule (still negated) - now the rule negatively matches the v6 addre

...

Resolved! Renewing Certificate for GUI from External CA

We have followed the below document. After importing the newly signed certificate into the firewall it does not replace the pending csr containing the private key. PAN OS 9.1.11-h3, any one else experience this issue?

Obtain a Certificate from an Exte

...

clewis1 by L3 Networker
  • 2688 Views
  • 2 replies
  • 0 Likes

Resolved! Downgrade panorama ha managed device.

Hi,

 

I have the following situation, a HA cluster managed by panorama.  For testing purpose I would like to downgrade it to an 8.1.21 release.  Coming from 9.1.12 release.

Couple of question:

Should I always perform upgrades / downgrades from Panorama,

...

GOMEZZZ by L2 Linker
  • 1987 Views
  • 1 replies
  • 0 Likes
  • 24011 Posts
  • 102 Subscriptions
Top Liked Authors
Labels