General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Device certificate is not renewing automatically

Hi all, hoping someone may be able to assist with an issue. We are seeing that every 3 months our PA device certificate is expiring which causes issues fetching updates from various cloud services (URL filtering, wildfire, update server etc). Upon renewing the device certificate manually using the OTP in the CSP, the process works and the ne...

Resolved! show url-cloud status - nothing returned

I am trying to get a basic url filtering profile setup. I have cloned the existing default listing I have applied the clone to my outbound policy Nothing is being blocked, I can get everywhere! My troubleshooting has then led me to the 'show url-cloud status' CLI command but this returns nothing, it simply appears to timeout after 20-30 seco...

WilliamD by L1 Bithead
  • 6911 Views
  • 2 replies
  • 0 Likes

URL Filtering - Counter Termism Internet Referral Unit (CTIRU)

Hi All. First post so hopefully in the right place. We are using our 3220s for url filtering in our school. I have been asked to check if our filtering is including content from the UK CTIRU database. We make use of the Extremism category as part of our filtering, however I cannot find any information to say one way or the other if the content...

Resolved! What is "FIPS failure. Power-On Integrity Self Test Failure (FS)"?

My customers are facing critical issue when he upgrades firmware.One customer is using VM-100, when he upgrades from 8.1.0 to 8.1.10 and reboot the device, he sees this issue.Another customer is using PA-500, when he upgrades from 8.1.0 to 8.1.9-h4 and reboot the device, he sees this issue.Both customers upgrades from 7.1.x and 8.0.x, and all st...

Image 001.png
emr_1 by L6 Presenter
  • 28787 Views
  • 8 replies
  • 1 Likes

Resolved! Check the maximum number of permitted ip addresses

Dear Team, I would like to know what is the limit on the number of 'permitted ip addresses' that can be set in Management Interface setting or Interface Management profile. When I searched, there doesn't seem to be anything about that information. If anyone knows about it, please share with me. Thanks in advance,Kyungjun,

CHOEKyungJun_0-1673257321567.png
CHOEKyungJun_1-1673257335312.png

Thermal Temperature Sensors PA5050 - 5250 - show system environmentals

Hello, good afternoon I hope you are all well. I have a question regarding the command output: show system environmentals In the ----Thermal---- section the following appears: PA-5050:----Thermal----Slot Description Alarm Degrees C Min C Max CS1 Temperature @ 10G Phys [U171] False 36.50 5.00 60.00S1 Temperature @ Jaguar [U172] False 51.00 ...

Metgatz by L4 Transporter
  • 2658 Views
  • 2 replies
  • 0 Likes

PaloAlto Firewall CLI partial commit by object-xpaths

Hello, I`m trying to include only single object into commit. Web interface allows to exclude objects from commit: On the first glance looks like CLI could provide such option: USER@Device# commit partial + description Enter commit description+ device-and-network device-and-network + policy-and-objects policy-and-objects + shared-object shared...

indoungwe_0-1673361108941.png

Palo VM randomly stops forwarding traffic

Hi all, I have a new Palo Alto VM-100 running in Proof of concept on version 9.0.2-h4I'm using a virtual wire to protect servers against all kinds of attacks, malware etc Yesterday evening for the first time, everything behind the firewall went down. I could not reach any of the hosts behind the firewall.After consulting with support, there was ...

Is there a way to see how many Address objects/groups I have?

Hello, all. I'm trying to determine how many address objects and object groups I have across all of my VSYS on one of my platforms. I found the command to show the maximum allowed (see below), but not one that shows how many are currently there. Is there a command like this, or does anyone know of a way to do it that doesn't involve manually cou...

  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
Labels