This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

XML API response for predefined EDL only returns 1 value instead of the entire list

Hi there,Has any one been able to successfully use the XML API to query the predefined EDL lists and have the ENTIRE list returned back in the response? When I attempt to query say the panw-torexit-ip-list, the XML response only returns using this command: https://<firewall>/api/?REST_API_TOKEN=**********&type=op&cmd=%3Crequest...

mslavens by • L1 Bithead
  • 1677 Views
  • 1 replies
  • 0 Likes

Failed to update threatss&apps

I have a Paloalto cluster and in the active FW I get the following error when trying to download and install the dynamic updates. Anybody can helps me? Regards

Alpalo_0-1669278366702.png
Alpalo by • L4 Transporter
  • 2098 Views
  • 1 replies
  • 0 Likes

Mobile device traffic - source users

Mobile users connect to wifi through to active directory authentication but in log-trafic- source users name not showing.(For laptop/desktop source users showing perfectly- this authentication also through AD)

PDF Report outlook missing attachment

Hi, my firewall is set to send PDF reports daily, attachments are usually not visible when receiving emails using Outlook. I tested sending reports to Gmail, but I can't see attachments when I use Outlook to receive emails. But you can see in the web version of Gmail Studying the source code of this email found that Outlook can display attac...

PNG File Chunk Length Abnormal

A strange trend we're seeing the application ms-update return a threat of: PNG File Chunk Length Abnormal It's been occurring since June and the png files related to the threat are named: sw_saber_rey.png sw_saber_luke.png sw_saber_vader.png Anyone else come accross this threat and application/file reference?

jr_dot by • L0 Member
  • 6332 Views
  • 1 replies
  • 0 Likes

Is A2 (Auto Assistant) dead?

Hi, Today, I could not access A2 (Auto Assistant).When I access https://autoassistant.paloaltonetworks.com/#/dashboard/my-view-case,returned 504 Gateway Time-out.Why? A2 is very helpful for my customer support business. Thank you.

Mt_103 by • L2 Linker
  • 10529 Views
  • 13 replies
  • 1 Likes

Are there performance issues due to object groups?

Hello all,As shown in the attached photo below, the limit on the number of members in the address group of PA-3220 is 2500.1. We are going to apply about 2000 Object Members per address Group to the PA-3220, is there any performance issue? If there were, what performance issues would there be?2. If 4,000 objects are grouped, is there no problem ...

Screen Shot 2022-11-23 at 9.20.43 AM.png

Questions about session limits on PAN

On firewall datasheets we have two max session values :Max sessions (IPv4 or IPv6) = AMax concurrent decryption sessions = B Question in here : are these two separate buckets ? lets imagine decryption sessions reach out to Value B , does it mean that firewall still able to process no-decrypted sessions ?

BGP Peer & Route Advertising

Hi All, I have followed a few guides but cannot manage to get a /30 RIPE subnet advertised to our ISP. I have followed the following guide for route distribution, however, i cannot see them in the Local RIB and RIB out tables. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm2ICAS Any help is greatly appreciated. Ou...

DForde by • L1 Bithead
  • 2439 Views
  • 1 replies
  • 0 Likes

Easy way to copy a policy from one firewall to another?

Good afternoon! I have a set of Palo Alto PA-820s and 850s that I'd like to converge their configurations. For instance, have the same whitelist or blacklist policy outlines that I can add or remove websites, countries, and so forth. I see I can share policies between virtual routers, but is there an easy or easier way to copy a policy from o...

SSO Kerberos setup for Admin

I have been able to set up Kerberos for explict userid/password entry at the logon screen. Now I am trying to setup SSO. I at least get to the Click the button to login as [email protected]. Yet when I proceed, I get Not Authroized. System log shows 'Authorization failed for user '[email protected]' vs the explict login that shows a login for 'u...

Resolved! Captive Portal not working on Google Chrome, Edge, Firefox on PAN-OS 10.1.0

Hi Team, We had upgraded the firewall version to 10.1.0 Then captive portal is not working on firefox, Edge, Chrome. It is working only on Internet Explorer older versions only. Not working on any other browsers. checked all the settings from knook and corner but no config issue and when the client intiates the sesion it is terminated with redir...

tamilvanan_1-1636734849181.png

Practical XFF usecase

XFF for user-ID - Displays IP as 'x-fwd-for: x.x.x.x' format Seems to me just an investigation help feature maybe can even block a particular IP/s if used in security policy as a source user, haven't tested this. XFF for Security Policy - Gives ability to block or allow based on IP in XFF. XFF IP's can be allowed/blocked used in security po...

raji_toor by • L4 Transporter
  • 2554 Views
  • 2 replies
  • 0 Likes
  • 24443 Posts
  • 125 Subscriptions
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks