This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

security policies associated with dynamic address groups:

To configure security policies associated with dynamic address groups: Select Palo Alto Networks > Policies > Security. Click Add to create a new security policy rule. 3.In the User tab, enable known-user. Configure the other options to meet your security requirements. Click Commit to complete the configuration.

Resolved! Using Salt Proxy to edit password in config on Palo Alto firewall PA-220

Hi, I am trying to use Salt to automate a config upload process. The problem is that the salt module for palo alto, called panos, needs access to the firewall on tcp443. "The panos proxy leverages the XML API functionality on the Palo Alto firewall. The Salt proxy must have access to the Palo Alto firewall on HTTPS (tcp/443)." from salt.proxy.pa...

Register DNS between GP and Internal Network

Hello team, The problem we are observing is that when devices switch from a corporate internal network to Global Protect and vice versa they do not update their reverse DNS record with the new IP received; it is clear that it is a problem between the devices and the DNS, but we wanted to know if from the firewall there is any configuration opt...

Alpalo by • L4 Transporter
  • 1683 Views
  • 1 replies
  • 0 Likes

Resolved! Networking or Dataplane apparent reload (5200 w/10.1)

I'm experiencing issues of what seems to be a "sudden restart" of all OSPF/OSPFv3 neighborship on a PA-5220/PanOS 10.1.6 firewall. I'm trying to pinpoint the root problem on my own, since our support contact (a partner, not PA's support) is taking the route that the problem is on OSPF neighbors' side, which is unlikely to be true, since it would...

Resolved! PA 220 initial setup

Hello, I am trying to setup a PA 220 from home. I have a BT connection but am using a TP link archer wifi hub I followed the instructions but didnt get a connection https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFkCAK any advice is welcome Please note you are posting a public message where community members a...

ohareka by • L1 Bithead
  • 4218 Views
  • 4 replies
  • 0 Likes

Resolved! QOS Config

Hi, I want to define separate profiles for upload and download for sub-interface, I couldn't succeed, can you help with the issue? (ip subnets and zone is correct)   if the TEST_DOWLOAND RULE is top it working for dowloand qos but not working UPLOAD qos rule.  if the TEST_UPLOAD RULE is top it working for UPLOADqos but not working DOWLOAN...

firefox_t4jDLdAYiB.png
firefox_HsrhiQvNv3.png
firefox_OSvinKUDMi.png

Resolved! PanOS 10.1 Clustering

Hello, I am used to configuring clusters on PanOs 8.x and 9.x. I am now configuring a new infrastructure based on PanOs 10.1.8. I have seen new options in "High Availability".1) Under "General" tab what is "Clustering settings" for?2) what is "Cluster Config" for? Thanks

Threat Prevention Inline Cloud Analysis - Allow on Max Latency

With the new feature - Advanced Threat Prevention in PAN-OS 10.2 There are Inline Cloud Analysis in PAN-OS 10.2I found a new setup - Threat Prevention Inline Cloud Analysis under Device > Setup > Content-ID I would like to know what is the different with enable or not on "Allow on Max Latency".Is it means that exceed the Latency of Inline ...

JoeKwok_0-1652954864578.png
JoeKwok by • L2 Linker
  • 5404 Views
  • 3 replies
  • 0 Likes

Resolved! LDAP Members in group Issue

Issues with Members in a group and a security policy - pa 850/9.15 os level - I use ldap to sync with AD , I merged the groups I need in the include group option - I see all the groups in cli by using show groups - I can also list members in the group from cli , - I use Kerbose to sycn user id's and they also show up in the userid /monitor.. ...

Resolved! Some emails not working on iPhone behind PA

I have a weird problem. I installed a VM100 connected via PPPoE to the ISP, standard NAT, DHCP configured on the LAN side. Issue: unable to receive/send emails from iPhone from SOME providers using inherid IOS app:Corporate email: working via IOS email appiCloud email: not working via IOS email appGmail email: not working via IOS email app, but ...

Hwinter by • L2 Linker
  • 6423 Views
  • 4 replies
  • 0 Likes

Resolved! Palo Alto Bandwidth Throttling

Hello Everyone, I have a question regarding Palo Altos and bandwidth throttling. I know that the Palo Altos can do QoS to limit the bandwidth for specific applications, but can the Palo Altos just do bandwidth throttling with different networks? Say for instance, we have an office and guest network going to a Palo Alto firewall. Can you do a QoS...

MarkTan by • L2 Linker
  • 29729 Views
  • 16 replies
  • 0 Likes

Interface change sync

Hi we have two PA-3220 in an HA active/passive configuration When i make a change to an interface on the passive firewall, for example i change the interface type to Aggregate Ethernet after i commit i see that the same interface on the active firewall will also be changed to type Aggregate Ethernet with the same Aggregate Group specified. Is th...

MSANWB by • L0 Member
  • 1904 Views
  • 1 replies
  • 0 Likes

Resolved! global protect

hi, I have a small question. I would like to know which version of global protect is compatible with both versions of windows 10 and windows 11. Kind regards

  • 24429 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks