This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Policy Edit - Search by IP

Am I missing something, or is 9.1.x Pan-OS still unable to search for address objects by IP address when editing policies? Surely there is a way to do this... our workaround was to simply rename every object to be 'name - IP'.. but we have 4000+ objects and this is a ton of clicking/modifying. Any thoughts? Thanks in advance!

Resolved! exchange 2016 exclusions

HiIs it possible to install cortex XDR on an exchange 2016 server?Do I need to make any exceptions before I install the traps? Cortex XDR Thank you

Shmuel by • L2 Linker
  • 2378 Views
  • 1 replies
  • 0 Likes

Resolved! Need help about PAN-OS 8 SNMP settings

Target is to forward the PA device status to a monitoring tool (Cacti). But "Cacti" respond SNMP error. Both v2 and v3 show the same error. Other devices (C2960) from the same subnet of PA has no problem. Below is the PA settingsSNMPv3Name: TestSNMP Manager: <IP_of_Cacti>User: testuserEngineID: <leave_blank> (I have 2 PA form an HA)A...

jeremylo by • L3 Networker
  • 10442 Views
  • 5 replies
  • 0 Likes

Failed to commit policy to device after downgrading 10.0.0

Hi All, We are trying to downgrade from 10.0.6 to 9.1.15. After we downgrade to 10.0.0 first , the auto commit have error. It mention failed to commit policy to device. Do anyone have go through the same problem? My suggestion is we just downgrade to 9.1.15 since we already in base version 10.0.

Momoj by • L2 Linker
  • 4847 Views
  • 3 replies
  • 0 Likes

Resolved! 3050 to 3250 Hardware Upgrade

Hi,I will be upgrading my 3050 firewall (managed by panorama) to a 3250 soon and am curious if there are any best practices guides out there moving from a 3050 to a 3250? Thanks!

Resolved! User ID Agent - Monitoring logs

We've noticed errors in the Monitoring logs of our Windows servers running the PAN Agent ID software. The User ID is working fine but the error is continually filling the logs. (error screenshot attached) PAN o/s 10.1.6 h3 and the Agent ID version is 10.1.1-102. useridd.log ========== 2022-12-21 08:38:10.822 +0000 Error: pan_ssl_conn_ope...

Screenshot 2022-12-22 151042.jpg
vij by • L1 Bithead
  • 4126 Views
  • 1 replies
  • 0 Likes

Resolved! threat log and traffic log time not match

Hi All, Same session id, see 37 entries in threat log at 9:28 and only 1 entry in traffic log at 11:16Session ended reason is tcp-rst-from-client There is a threat log before there is a traffic logHow to explain such a long time difference? Does anyone know what's going on? thanks

Hsinyu by • L1 Bithead
  • 1990 Views
  • 1 replies
  • 0 Likes

Resolved! dashboard session expire time

Dear Team, If I look at the bottom of the dashboard, I can see 'session expire time'. I think that option refers to the last time I logged out. But the date info doesn't seem to fit I would like to know what the setting is and why the time is not correct. If anyone has any information or related documents that they know about this, I ...

CHOEKyungJun_1-1671788957044.png

A way to correlate the logs for DNS Sinkhole?

Dear and valuable Live Community Members, One of our customers came to us with some questions in regard to the issues he is facing to correlate the logs for DNS Sinkhole, and we are wondering if there is a solution to it. The customer currently has the following situation:• Rule ‘DNS_Service’: this rule will allow DNS traffic from the FSMA I...

RMA replacement

Hi All, We will doing a RMA replacement for PA-3220. The faulty unit is cannot access anymore from GUI or CLI and it's managed from Panorama. We only have the backup configuration and not the device state. So, what we should? 1)Do we replace the fault unit with the new one, configure the HA with the active unit and replace the S/N in the firew...

Momoj by • L2 Linker
  • 7436 Views
  • 13 replies
  • 0 Likes

Public Cloud Server certificate validation failed. Dest Addr panos.wildfire.paloaltonetworks.com

We received following alert:-----domain: 1...eventid: tls-X509-validation-failedobject:fmt: 0id: 0module: generalseverity: highopaque: Public Cloud Server certificate validation failed. Dest Addr: panos.wildfire.paloaltonetworks.com, Reason: unable to get local issuer certificate We don't use decryption policy.We need assistance to resolve this...

Mt_103 by • L2 Linker
  • 9179 Views
  • 2 replies
  • 2 Likes

RFC1918

Basic trust to untrust policy I see internal address sending snmp to addresses like 10.0.0.1, 192.168.1.x. Do people create a policy to block internal traffic going to RFC1918 on the untrusted interface?

  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks