General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1927 Views
  • 0 replies
  • 0 Likes

Resolved! HA Passive Link State - Change

We want to modify the HA Passive Link from shutdown to auto on production firewalls. I suppose it is a pretty straighforward change, but I would to confirm if there is something which we should keep in mind. Something like applying first in the passi

...

Service route for Destination

Have 2 radius servers, 1 is used for admin login and is accessible only via the management interface, and another radius server is used for global protect authentication and is accessible via another production port.

 

Tried to configure custom servi

...

Palo alto Lab environment

Hi All,

 

I am hoping to build a lab environment to fully learn the palo alto firewall and I wanted some recommendations on the most cost effective way to achieve this. I already have some physical cisco gear (switches, routers) however I'm not again

...

Mr8023 by L1 Bithead
  • 9338 Views
  • 2 replies
  • 0 Likes

Active Active VIP ping inconsistent

Hello All,

i have 2 Firewalls configured in HA Active Active.

I have a L3 sub interface created on each firewall and a vitual address configured as IP-Modulo arp-load-sharing.

 

ex:

FW1 (primary): 192.168.0.2/24

FW2 (secondary): 192.168.0.3/24

Virtua

...

GSuite apps not decrypted when using Chrome

I have seen some older posts with no updates on this very subject so I thought I would start a new thread.  I am testing SSL decryption from a couple of workstations and have almost all of the traffic being successfully decrypted.  We are a Google su

...

TroyGamm by L0 Member
  • 1849 Views
  • 1 replies
  • 0 Likes

Block HTTP/HTTPS access via IP

Hello.

 

I would like to block access to my site (http/https) when it is made via IP.

I want to only allow access made by name.

 

Ex.: www.mysite.com <=> 1.2.3.4

 

https://1.2.3.4 => deny

https://www.mysite.com => allow

 

 

Is that possible with Pal

...

PA-access.by.name.jpg
Robynson by L0 Member
  • 2596 Views
  • 1 replies
  • 0 Likes

Resolved! Template- Variable CSV greyed out

 

I want to import template variables but the "Variable CSV" is greyed out as seen below.  We are running Panorama 10.2.3 . I want to build a CSV  to import variables for a template. Any ideas?

 

 

Thanks

 

NSutfin_0-1667944924048.png

PA Packet Capture

Hi All,

Is there any similar command which we can use to check how the packet flows in PA and where the packet is being dropped, which blade is dropping the traffic. To simplify my question is there any command like Packet tracer command in Cisco ASA

...

  • 24193 Posts
  • 117 Subscriptions
Top Liked Authors
Labels