General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How to Convert Device Specific objects into Shared

Hi everyone,

 

Hope everyone is doing Great. 

 

I have one question regarding the shared objects and here is the problem I am facing.

 

I am trying to find the best way to convert device specific objects(addresses, services, tags) into shared objects. I wa

...

Resolved! How Palo alto HA and Cisco HSRP work together ?

How Palo alto HA and Cisco HSRP work together ?

 

For example 

===========

Here Palo alto HA is upstream devices ( lets consider PA1 and PA2 are in HA setup). 

Cisco Switches are catalyst 6509 or nexus 5 or 6K ( SW1 and SW2)

SW1 is connected to PA 1 and SW

...

perumalj by L2 Linker
  • 5471 Views
  • 4 replies
  • 0 Likes

Physical connections to vSphere cluster for VM-200

Hey folks,

 

Can someone point me to a "best practice" design guide or white paper for making the physical connections to a vSphere cluster that will run a VM-200 virtual appliance? I'm only seeing configuration guides on deploying and setting up the

...

markdean by L0 Member
  • 1597 Views
  • 1 replies
  • 0 Likes

2 subnets on the same interface

We current have 1 subnet linked to an layer 3 interface which is supplied by our isp. We have run out of ip addresses and our isp want to present another subnet but on a completely different range. (too many services to move to a new range)

Is it just

...

Resolved! API key too long

Hello all,

 

I am using the guide below to clear out UDP sessions after a PBF failover.  When I get to the part about the key parameter under Payload Format, it says the value is too long.  I am copying the exact key I generated from the web browser. 

...

ClintL by L2 Linker
  • 2291 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama with log collectors

Here is the set up.  Palo FW HA pairs send logs to Panorama and Log Collectors.  Log Collectors send logs to long term archival (LTA) such as LogRhythm.

 

Here is the issue, long term storage is not seeing the latest logs.  I guess what I don't underst

...

Resolved! Releasing and reassigning VM-50 pa-vm license key

purchase a VM-50 lab bundle last year.  pa-vm license was "perpetual"
, while the other components were 1YR subscriptions.  Subscription expired on 7 October 2021.

the previously licensed was "destroyed"  ☹️ before it could be properly deactivated.  I

...

MAAXIT by L1 Bithead
  • 2493 Views
  • 3 replies
  • 0 Likes

Best practices - Schedule - allow and block Traffic

Greetings (apologies in advance if this is a bit long)

 

Could i have some advice on what would be considered best practice for allowing and blocking certain traffic at certain times.

 

As a school (K-12) that has Day Scholars, boarder Scholars, live in

...

Real Time Traffic on PA Interface

Hi All, 

 

I am stucked with  very basic requirement on Palo-alto firewall. 

 

Would like to know how to check the traffic statistics on PA Interfaces as requirement is to check the current live traffic on specific Interface. 

 

Followed some articles avai

...

Jimmy20 by L2 Linker
  • 2203 Views
  • 1 replies
  • 0 Likes

DHCP relay issue

Hello all,

 

I have an issue with the DHCP. 

I have DHCP relay configured on the device (PA820), remote windows server, connectivity and  policy permitting DHCP traffic.

The problem is that the traffic is sill dropped by the FW, classified as not applica

...

Screenshot 2021-11-25 at 11.56.38.png
Screenshot 2021-11-25 at 11.58.01.png
stef by L2 Linker
  • 3722 Views
  • 2 replies
  • 0 Likes

Error on generating system logs

i just upgraded to 9.1.11 from 9.1.10 and i get a pop up message saying "Error on generating system logs" but the logs shows up fine and updated

is this a bug ?

 

there isn't an error in the system monitor and i checked the known issues but it wasn't in

...

perr.png
LAS by L2 Linker
  • 23989 Views
  • 33 replies
  • 3 Likes

DNS Proxy technical details?

I am checking out DNS proxy as a possible use case. We have a requirement to log DNS requests that include the true source info. We have a few environments with wireless clients that will not otherwise have our normal agents or tools installed in ord

...

External ping to public ip of secondary ISP interface.

I am having issues allowing pings on my secondary ISP interface. I have a dual ISP set up with my main connection a 10gbit connection with ISP1 and a backup 1gbit with ISP2. I am currently using path monitoring for internet failover and I also have a

...

Dyardley by L0 Member
  • 2624 Views
  • 2 replies
  • 0 Likes
  • 24196 Posts
  • 100 Subscriptions
Top Liked Authors
Labels