General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Upgrading from 3220 to 3250

Is there a means of copying all configuration from a 3220 PAN to a 3250 including the certificates? 
The main impetus to upgrade would be to accommodate more Global Protect tunnels (2048 instead

of 1024.) I'm trying to understand what that migration mi

...

File types need to block

The file type is malicious as per the swift advisory 2021, that need to be block on the Palo alto Firewall.

File Type .gmu,.ekt, .jpn,.er,

SurajN by L2 Linker
  • 1789 Views
  • 3 replies
  • 0 Likes

Global Protect Single/One login Portal/Gateway

Good afternoon, I have a question:

 

I have Global Protect configured and operating, operating correctly Portal and Gateway.

When one uses the Global Protect App, it always asks 2 times for login, I understand that one is in the Global Protect Portal an

...

Metgatz by L4 Transporter
  • 2067 Views
  • 1 replies
  • 0 Likes

Timeout on syslog sourced User-ID mappings?

Greetings all,

 

Taking another look at our user-id mappings with our server team today and we've landed on trying 90 minutes for AD.  We set this on the agents installed on two of our AD servers and the firewall is showing the new logs coming in as ha

...

jsalmans by L4 Transporter
  • 1856 Views
  • 2 replies
  • 0 Likes

PCI DSS testing failure

We are using SecurityMetrics to test for PCI compliance and have recently started receiving a failure based on TCP/IP Initial Sequence Number (ISN) Reuse Weakness (CVE-2002-1463) for the PaloAlto firewall (5.0.8).

I'm not sure how to remedy the proble

...

Resolved! Understanding Top Attackers Report

Hello,

 

The Top Attackers reports lists:

  • Source Address
  • Source Host Name
  • Source User
  • Count

In a report I ran, all of our source addresses are internal addresses.  Why is that?  Is the report more of a top talkers report than an attackers report?  In other

...

Jeff by L1 Bithead
  • 7333 Views
  • 8 replies
  • 0 Likes

Unable to sign into GP client with Azure AD SSO

Hi All,

 

Trying to setup Azure AD SSO with Global Protect, but am receiving the below error. According, to the Microsoft documentation it means that the user is not assigned to the application in Azure, but I can confirm that the user is assigned corr

...

BenPrice_1-1638510522152.png
BenPrice_2-1638510770774.png
Ben-Price by L4 Transporter
  • 4330 Views
  • 4 replies
  • 0 Likes

PA-220 Generations / Versions

Hi All,

 

As part of a large project I have been deploying PA220's, this has been ongoing for about 2 years and 130 boxes later. 

 

When I started the boxes were heavy as, then they were lighter and now we are onto the third variation of the PA220.

 

Is th

...

  • 24197 Posts
  • 100 Subscriptions
Top Liked Authors
Labels