General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

L3Svr Restarting automatically

Hi Team,

 

The l3svc process is restarting automatically whenever we are doing an commit on the firewall.

 

This is sometime causing captive portal to not work correctly.

 

Is this an bug. We are having PAN-OS 9.1.10 currently installed on the firewall and

...

Resolved! How to display more than 100 items in EDL

I need the whole output from an EDL but command only displays 10. Even in the rest API.

GUI works but i can't export it form there.

Source was deleted and now i need to restore all the entries in that EDL

 

Total valid entries : 2295
Total ignored entries

...

raji_toor by L4 Transporter
  • 3028 Views
  • 4 replies
  • 0 Likes

Resolved! Management ip address cannot be seen again

Hi Management interface ip address is configured, and it could work before. but now I cannot see it. After the ip address is reconfigured(and commit), I still cannot see it. Below is its config. Anyone can take a look at it? Thank you!

 

set deviceconf

...

Custom URL Categories - ending tokens

Let's say we want to match a domain in a custom URL category or EDL, including all sub-domains. While most people would expect "youtube.com" to do the job, in a PAN-OS this would only match youtube.com and not content.youtube.com. To achieve the resu

...

mb_equate by L3 Networker
  • 3795 Views
  • 1 replies
  • 1 Likes

QoS priority - 'real-time' vs 'high'

Hi,

 

What is the difference between 'real-time' and 'high' priority than? Will there be any difference under similar circumstances when you have 100 Mbit/s MAX egress and 50 Mbit/s guarantee, while actual traffic matching this class exceeding 100 Mbit

...

User Mapping on Mac with M1 chip in domain

Hi All,
I joined Macbook on m1 chip to the domain and the firewall don't recognize user (Don't work user-mapping). I can't apply policy which works via users.

We have 3 Mac's on m1 chip with the same problem. Also checked on Mac with intel - no proble

...

Newbie: VPN on PanOS 10

Hi everyone,

 

This is probably trivial, but I am fairly new to this so bear with me:

I would like to set up the PA firewall as a VPN server for users to connect to (ideally, using only the built-in windows client). After authentication they should have

...

PANOS 9.1 know issue PAN-83610 network processor

PAN-83610

In rare cases, a PA-5200 Series firewall (with an FE100 network processor) that has session offload enabled (default) incorrectly resets the UDP checksum of outgoing UDP packets.
Workaround: In PAN-OS 8.0.6 and later releases, you can persist

...

VLim by L2 Linker
  • 2534 Views
  • 1 replies
  • 1 Likes

Maintenance mode

When we try to access maintenance mode keeping "M" press the device just stop booting and nothing appears on console. Then if I press the M after some seconds just normal boot. We also try typing "maint" but no luck

 

v-ealva by L0 Member
  • 2354 Views
  • 2 replies
  • 0 Likes

VWire Radius (NPS) via Mgmt

Happy 2022 ! 


We've just setup VWires for our branches firewalls (A/A Layer 2), no ip address on any interfaces except :

- Mgmt (routable and managed by Panorama)

- HA1-3 (non-routable address) 

 

Most of the device management (SNMP, NTP and etc via Mgmt

...

annielee by L2 Linker
  • 2186 Views
  • 4 replies
  • 1 Likes

Downgrade from 9.1.12.h3 version to 9.1.9

Hi All,

 

I have decided to upgrade my Palo Alto 850 from version 9.1.9 to 9.1.12.h3 but after the secondary Palo Alto upgrade facing an issue where interface are not getting up so my team decided to roll back to version 9.1.9. Should my configuration

...

PANOS 8.0.x restart IPSEC tunnels from GUI

Dear all,

 

we found out that we are not able to restart VPN tunnels in PANOS 8.0.x from GUI because its grayed out and it is an expected behavior as you can see the message "Restart disabled because OK".

 

The conclusion is that on version 8.0.x it's no

...

Rboehme by L2 Linker
  • 3616 Views
  • 3 replies
  • 0 Likes

Remote backup issue

I am trying to backup the config from a remote backup server. The backup file is generating but no config showing in the file. Instead when I open the xml file, I can see this    " <?xml version="1.0"?>  -<response code="403" status="error">  -<resul

...

Kerberos SSO for Captive Portal

Been working through options for gathering userID data on non-domain-joined machines lately, so here's another complete option using Kerberos (krb) SSO.

 

Create a user in AD (my example, username: krb.palo), check the boxes for:

  • User cannot change pass
...

jbworley_0-1641995839136.png
jbworley_1-1641995839170.png
jbworley_2-1641995839174.png
jbworley_16-1641997811010.png
jbworley by L1 Bithead
  • 3594 Views
  • 1 replies
  • 5 Likes
  • 24299 Posts
  • 99 Subscriptions
Top Solution Authors
Top Liked Authors
Labels