General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Value from SNMP polling sometimes 0

Hello,

I have small issue with snmp.

 

We're monitoring PA's interfaces via SNMP.

Sometimes values are 0, so it causes 100% of interface usage.

 

Similarly, when I use cmd "show counter rate eth~", sometimes it shows 0.

It happens when I execute cmd before

...

1.png
yhlee1 by L2 Linker
  • 1245 Views
  • 0 replies
  • 0 Likes

enable rules for MS Teams

Hello to everyone! This is my first topic))

Gents, need your help to enable MS Teams for user w/o internet access.

Need for users w/o authentication could start video conference in teams.

 

I added teams.microsoft.com to enabled address, also created MS

...

Palo Alto Configuration Change

Hi,

 

Long time lurker here.

I need some directions with a project I am preparing.

The project adapts the way we communicate with the internet. This means preparing PBF rules, NAT rules, quite some objects(100+) and groups (10+) and also adapting the way

...

sopa by L0 Member
  • 1458 Views
  • 2 replies
  • 0 Likes

PAN-OS 9.16 SMB Issues - mapped network drives.

Hello all,

Please be advised, there is a current issue with PAN-OS 9.1.6 which seems to break anything SMB related, e.g. mapped network drives. Sessions have an end reason of "incomplete" and go into state "aged out" in the session table.

 

After doing

...

FQDN security in policy

Hi All, I am quite new to palo alto. can anyone explain me what happened if we configured object as a FQDN, IP and URL..I have created one security policy where I have implemented destination as a FQDN (nslookup results into 1 IP address) but user is

...

Resolved! PAN-OS 8.1.0 SMB Issues

Hello all,

 

Please be advised, there is a current issue with PAN-OS 8.1 which seems to break anything SMB related, e.g. mapped network drives. Sessions have an end reason of "resources-unavailable" and go into state "Discard" in the session table.

 

Upo

...

QoS and IPSec

Hi All,

 

I would like to enable QoS on an IPSec tunnel. The tunnel is carrying mostly voice and signalling traffic.

If the voice traffic has a marking, eg EF, will this marking be copied to the outer IP header (the IPSec tunnel header)?

 

Or, will I have

...

Luke_R by L2 Linker
  • 1464 Views
  • 1 replies
  • 0 Likes

Resolved! Expedition: Export - Base Configuration Output

Export in base configuration output screen Device-Groups does not show arrows to expand organizational groups and sub groups. When trying to import from Panorama 10.0.

Currently running Ubuntu 16.04.6 and the Expedition shows 1.2.15 but had error mess

...

Gol4 by L0 Member
  • 1828 Views
  • 1 replies
  • 0 Likes

PA Firewall Performance Chart

Spoiler
Looking at the comparison chart, if I was interested in the 3430 and I use SSL decryption, threat prevention\wildfire\URL filtering and IPSEC vpn does that mean I would get roughly 9/2 Gbps or 12.2 Gbps?
Looking at the comparison chart, if I wa
...

roma_0-1648500614096.png
roma by L2 Linker
  • 1459 Views
  • 1 replies
  • 0 Likes

WMI On server 2022 for USER-ID

Hi There,

 

Have a pair of PA-3220s. User-ID was working swimmingly. Recently upgraded our DCs to Windows Server 2022 and WMI is routinely failing and showing "Not connected" under server monitor.

 

Doing some reading on WMI and Server 2022, and it sound

...

kaumell by L0 Member
  • 3172 Views
  • 1 replies
  • 0 Likes

Resolved! SSL certificate for passive firewall

There is an active passive pair having SSL certificate (management only) with different CNAMES (its own management IP).

 

While the CSR generation and certificate import (signed by ECA) is successful on active peer, the CSR generated on passive peer is

...

Resolved! IPSEC VPN - app-id

Hello all,

We have a software ipsec connection that will be between an inside server and a server in the cloud. The PA will just be a pass through so to speak, (nating and security rule).

The ipsec requires UDP 500 and 4500 and the IP 50 protocol. Do y

...

roma by L2 Linker
  • 3327 Views
  • 2 replies
  • 0 Likes
  • 23591 Posts
  • 103 Subscriptions
Top Solution Authors
Top Liked Authors
Labels