General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1917 Views
  • 0 replies
  • 0 Likes

PAN and intermediate CAs

Last couple of days I've had quite a few cases where I had to manually add intermediate CAs as a Trusted Root CA in order for decryption to work (for customers blocking untrusted CAs already on firewall).

 

These are quite well known intermediate CAs

...

santonic by L6 Presenter
  • 3557 Views
  • 2 replies
  • 0 Likes

Resolved! Multiple ISPs with Path Monitoring

Hi All

 

Need a sanity check.  When deploying multiple ISPs using path monitoring, instead of policy based forwarding,  should the 2nd ISP become unreachable?  It makes sense that it does, but it wasn't mentioned in Palo article about it

 

Setup woul

...

SCP Export Error PanOS 10.2

Hello everybody!

 

It appears that PanOS 10.2 has the ability to export Software.  However, I'm receiving the following error when attempting to do so.

 

For reference, I am attempting to do this from Panorama.  The scheduled config export to the sa

...

schroedera_0-1666884171644.png

Highlight Unused Rules Option - Missing

Hi,

 

We have multiple 'Admin Roles' setup and we have noticed the 'Highlight Unused Rules' tick box at the bottom on the policies page is missing.

 

What permission am i missing to allow this?

 

 



Please note you are posting a public message where co...

ElliotM by L2 Linker
  • 2646 Views
  • 1 replies
  • 0 Likes

SSO Error when Accessing KB or Supportcases Portal

Hello all,

 

Recently (these two weeks) I have encountered SSO Error when browsing to KB & Support Case pages which I don't have such issue before.


https://knowledgebase.paloaltonetworks.com/

 

https://supportcases.paloaltonetworks.com/_nc_external/i

...

SeanDeHarris_0-1657263836839.png

Captive portal SSL decryption policy requirement

Hi,

 

PAN has the following document [1] which says you need to have SSL decryption in order to redirect SSL pages to captive portal.

To me it doesn't seem to be accurate. Response page [2] workaround seems to be doing the same i.e without having an SSL

...

CRL Distribution Point (CDP) Config

Is there a place in the PAN-OS to configure the CDP address or does it only learn it from the certificate? We have a new CDP we are testing and have added it's IP to our cert but the firewall is not attempting to contact it, only the second one. Is t

...

LEEF Format

Dear Team,

 

Appreciate your feedback as we facing challenges with LEEF format when we configure a Syslog server with a custom log to allow integration with the Qradar SIM solution.

 

We use the same format as mentioned on the IBM website below,

http

...

Dual ISP Global Protect Redundancy

Hi Team, 

 

I hope ye all are well. We recently worked a case for a customer that had dual ISP configuration and wanted the Palo Alto Networks device to provide redundancy for the Global Protect Portal and Gateways in the event one ISP went down. We ca

...

interfaces.PNG
loopback.PNG
natRules.PNG
VirtualRouters.PNG

ESA | ELA When license price is increasing

Dears,

If we get an ESA / ELA let's say for 3 years, we pay the hardware, and then we would pay an initial price for support and licenses. Next, If the list price of support and /or licenses increase during these 3 years, and then we buy more hardwar

...

ftesta77 by L0 Member
  • 2105 Views
  • 1 replies
  • 0 Likes

Error Handling in Custom Playbooks

Hello all,

 

To handle with different types of playbooks and tasks, is there any implementation method or best practice guide to identify errors in playbooks. If a task or subplaybook stucks in main playbook I want to get informed about it and handle

...

UmutAK by L1 Bithead
  • 1445 Views
  • 1 replies
  • 0 Likes

Nuevas ISO 27001, 27005 y 27005

Como las nuevas versiones de las los estándares ISO 27000 se integran en la realidad de la seguridad de la información, y como se llevaría mejor su implementación?

#ISO27000

#ISO27001 

#ISO27002

#ISO27005

 

  • 24193 Posts
  • 117 Subscriptions
Top Liked Authors
Labels