General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4135 Views
  • 0 replies
  • 0 Likes

Resolved! Video and speed are slow when using MS-teams

Hello.Currently using ms-teams.In use, if many users participate in a meeting, the picture quality and speed deteriorate.Because the paloalto firewall is also in the middle of the network environment, the operation of the firewall is also suspicious.No packets appear to be blocked.Could you please let me know if you are experiencing the same sym...

jskang by L1 Bithead
  • 7372 Views
  • 4 replies
  • 0 Likes

stdlib.syslogMiner issue

She wants him to **bleep** inside - https://livesex.cafeMy slutty neighbor cums on my **bleep** - https://livesexcams.fansRed haired girl comes twice giving **bleep** - https://sexcam.blue

Grantru by L0 Member
  • 1863 Views
  • 1 replies
  • 0 Likes

Does PA fail closed by default?

I'll be darned if I can find any documentation that speaks to if/how interfaces are configured to fail closed if there's a system or interface issue. Does anyone have a URL that talks to this? Thanks, Jeff

IPv6 Support

Are there any updates as to if/when PAN will support DHCPv6 Client and IPv6 Prefix Delegation? This is preventing a purchase for me. Without the ability to receive an IPv6 address and prefix delegation dynamically on the WAN interface, this is a show stopper.

access logs from bluecoat proxy to windows user-id agent

Trying to get bluecoat proxy to send its access logs to windows user-id agent. configured custom log on bluecoat in the following format PAN Source=$(c-ip) Username=$(cs-username) Action=$(s-action) On user-id agent side I am seeing server receiving syslog messages in the format specified PAN Source=x.x.x.x Username=usernamexxx Action=TCP_HITPAN...

fwguy77 by L1 Bithead
  • 8934 Views
  • 8 replies
  • 0 Likes

Global protect - external gateway blocking?

In the global protect gateway settings where you can select the priority by region does the firewall block connections from any regions that are not included there? this is the article discussing the feature I’m referring to: https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-new-features/globalprotect-features/external-gateway-priority-by-sour...

Can't enable user-id on sd-wan zones

I need to enable user-id on panos sdwan zones - e.g. zone-to-branch. I can enable it in the template on panorama, but it doesn't change on the firewall when pushed. Everything else is working fine, so this is not and template/stack issue. Is this a sdwan issue or work as expected?

Resolved! Basic question regarding policy

Just trying to understand the policy a bit more. under the policy | application, if I select FTP and select http/s under the service, I assume fw is expecting FTP to run on port 80/443? hence, if I select app default on services, it will then expect the ftp traffic on port 21? what I was looking into allow ftp/http/s. I end up creating 2 poli...

Shadow by L2 Linker
  • 3049 Views
  • 3 replies
  • 0 Likes

Panorama in AWS

In an AWS environment which is making use of the TGW and GWLB, is it okay to deploy Panorama in a VPC that gets routed through GWLBe or should Panorama get deployed in the security VPC and have the route tables bypass all gwlb endpoints? I'm wondering if having panorama go through gateway load balancer endpoints would cause issues. The pano...

Resolved! Is A/P Throughput synchronized?

Dear Team, I know that sessions are synchronized except for the conditions below in the A/P configuration. -In Active/Passive mode, ICMP and host sessions are not synchronized between peers.(Note: A host session is a session terminated on one of the firewall interfaces, such as an ICMP session pinging one of the firewall interfaces or a GP t...

CHOEKyungJun_0-1669957164036.png

How to correctly decrypt FTP (over TLS) traffic

Hi, I am facing the common issue of Passive FTP (over TLS). Basically, the connection fails due to the dynamic ports assigned in the encrypted channel. It is clear that the solution is to configure PA to decrypt the traffic to identify the dynamic port and PA automatically (and temporarily) will open the traffic for that port. But unfortunately,...

Updating password with XML API for Palo Alto firewall user.

I have a physical firewall and want to change the password on an admin by the use of XML API. I have followed the guide from How to Change the Password of Administrative Users via XML API - Knowledge Base - Palo Alto Networks and everything works and ends with success. However, when I try to login with the new password it does not work. And neit...

  • 24340 Posts
  • 124 Subscriptions
Labels