This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

problems after RMA of an active-passive pair

just to give a baseline - hardware are pa-5220, running 10.1.6-h6, HA (active/passive), device managed by Panorama. Long story short - one of the firewalls got stuck on a reboot cycle where the firewall would reboot every 85 minutes. The data plane would not come up during this time and support processed a RMA. For the fun part: our initial...

RREALICA by • L2 Linker
  • 3208 Views
  • 2 replies
  • 0 Likes

ECMP

Dear Team, Our question is "How can the firewall choose the route without configuring the ECMP" Appreciate your support as mentioned in this documentation https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/ecmp "Without this feature, if there are multiple equal-cost routes to the same destination, the virtual router choo...

Register Used PA-820

I need help. I bought a used PA-820 off eBay. Works great! When I try to set up account on support.paloaltonetworks.com, I enter the serial number and SO. However, each time, the registration fails. I get an error message telling me to try again later. I tried on different computers and browsers on different days. Always the same result. The r...

TheMike by • L0 Member
  • 2290 Views
  • 2 replies
  • 0 Likes

traceroute application allows tcp port 80

Hi,Received a call from a client said their external scanner shows their servers behind the firewall allows tcp port 80 connections and able to passive finger those servers, but there is no firewall rule permit tcp port 80 to those servers. Digging it deeper, found one of the rule allows traceroute application with application default which all...

DNS Sinkholing - missing related traffic logs on windows machines

Since we configured dns sinkholing for some stuff like parked, malware domains, we are seeing related threat logs but no associated traffic logs pointing us to the source behind the queries. Recently we tested it on Mac machines and we do see traffic logs to sinkhole IP, but it doesn't seem to be working on the windows hosts. Has anyone exper...

rufat87 by • L2 Linker
  • 1784 Views
  • 1 replies
  • 0 Likes

SNMP OID Interface Throughput per Interface

SNMP Nagios OID interface Interface Throughput per Interface Hello good afternoon, first of all thanks for your collaboration. I have a question, can someone tell me, the exact data of the OID or to build the troughput detail, to monitor the "throughput" of each of the interfaces and if you can also get the Global detail of the total through...

Metgatz by • L4 Transporter
  • 4559 Views
  • 1 replies
  • 0 Likes

Two IPSec with same subnet on their end

I can't find a How-to document or community comment on this exact issue. Some that are close. And maybe I didn't search with the right terms. I have one customer that connects to a resource on our network. We set up an IPsec VPN between them and us. Their inside subnet is 192.168.1.0/24. I set up a static route on our 'default' router tha...

Renewal period for licenses

Me puedes ayudar. Que periodo se toma en cuenta cuando hago una renovación de licencia con diferencia en la fecha original que tenia que renovar. Por ejemplo mis licencias vencieron el 22 de febrero, pero las renové el 22 de noviembre, respetan las fechas de noviembre a noviembre o cuentan del 22 de febrero al 23 de febrero?

Policy Edit - Search by IP

Am I missing something, or is 9.1.x Pan-OS still unable to search for address objects by IP address when editing policies? Surely there is a way to do this... our workaround was to simply rename every object to be 'name - IP'.. but we have 4000+ objects and this is a ton of clicking/modifying. Any thoughts? Thanks in advance!

Resolved! exchange 2016 exclusions

HiIs it possible to install cortex XDR on an exchange 2016 server?Do I need to make any exceptions before I install the traps? Cortex XDR Thank you

Shmuel by • L2 Linker
  • 2353 Views
  • 1 replies
  • 0 Likes

Resolved! Need help about PAN-OS 8 SNMP settings

Target is to forward the PA device status to a monitoring tool (Cacti). But "Cacti" respond SNMP error. Both v2 and v3 show the same error. Other devices (C2960) from the same subnet of PA has no problem. Below is the PA settingsSNMPv3Name: TestSNMP Manager: <IP_of_Cacti>User: testuserEngineID: <leave_blank> (I have 2 PA form an HA)A...

jeremylo by • L3 Networker
  • 10405 Views
  • 5 replies
  • 0 Likes
  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks