General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 604 Views
  • 0 replies
  • 0 Likes

Resolved! SSL Decryption+ALPN not stripped: yandex.com not working

Hi

 

I have a customer that wrote to me yesterday that if they remove the checkbox for Strip ALPN while having SSL decryption enabled, a few web sites such as yandex.com stop working.

I was able to reproduce this with my PA-3220 and PANOS 9.1 and also o

...

ShaiW by L4 Transporter
  • 5889 Views
  • 4 replies
  • 1 Likes

Resolved! Updating the HA configuration in large hops.

Hello community

 

I am upgrading a PANOS 8.0.7 to version 9.1.14-h1

 

I would like to know if in the transit versions, you download and install only the base 9.0.0.0 or is recommended to download the base 9.0.0 and install the recommended 9.0.16-h2
fo

...

PAN-DB is not connect to cloud

DB Cloud is not connected as i have 9.0.3h3 version. And this command is also not running. Please suggest

 

request url-filtering download paloaltonetworks region <region_name>

 

Joshan_Lakhani_0-1586860186931.png

Command user group name not working

Hi,

 

We just check that the command:  show user group name 'cn=......' has this output: 

user group xxxxx does not exist or does not have members. All config is OK. 

 

If we run "show user group list", i can see al the groups, but filtering by one of the

...

BigPalo by L4 Transporter
  • 7309 Views
  • 7 replies
  • 1 Likes

Issue with VXLAN traffic passing through the firewall

Hi Team, 

 

We have an SDWAN box placed behind the firewall and the SD_WAN box need to communicate with the controllers which is located on the internet.

 

The topology is given below:

SD_WAN Box<--->F/W LAN interface<--->F/W ISP interface <--> Internet <

...

tamilvanan_0-1653585569659.png

Resolved! Sinkhole vs whitelising url

Does the sinkhole take precedence over whitelisting? We whitelisted a url and are sinkholing parked categories. I can request to have the category changed, but was not sure which took precedence. 

gfleming by L0 Member
  • 2815 Views
  • 2 replies
  • 0 Likes

Resolved! Always on GP Using Local CA for Prelogin and SAML Auth

I am building and always on VPN with Prelogin (both windows and MAC) and SAML authentication. Everything works as expected with PC computers. With the MAC computers, we see the Prelogin connection, Then it is supposed to switch to user authentication

...

Carleton by L3 Networker
  • 2262 Views
  • 1 replies
  • 0 Likes

office365 uploading App-ID not recognized error

Dear Team,

 

There is a symptom that the office365 application is not recognized correctly.

 

For example, if you connect to the office WEB (office.com) and create powerpoint and word documents, they are recognized as 'ms-powerpoint-online' and 'ms-s

...

PA in Azure intermittent connection

Hi,

 

Newbie here for Palo Alto and thanks in advance for any help/comments. We have a customer who has a PA-220 on-prem for their internet and PA in Azure for their cloud app server. Internet is working fine in their on-prem and has a Site-to-Site v

...

Palo Alto - Barracuda IPsec VPN problems

We've a IPsec-VPN IKEv2 between Palo Alto (10.0.7) and Barracuda (8.0.5-0341) with 10 IPsec tunnels, one VPN-tunnel per subnet-pair, on Palo side "proxy IDs".

At least once every day, some of these ipsec-tunnels go down and can only be forced to come

...

ChrisCon by L2 Linker
  • 14877 Views
  • 12 replies
  • 0 Likes

Resolved! Web interface not working

Hi

 

About 2-3 month ago, my ability to edit tags for ip addresses or any object doesn't work. the tag field compacts to 0pixel height !

I have attached a screen shot you can see the item has tags, but when you open it up the tag field is collapsed w

...

  • 23936 Posts
  • 113 Subscriptions
Top Liked Authors
Labels