General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! ECMP Preferred Route

Hi All, Does anyone have the answer as to how the Palo Alto choses the "preferred route" when ECMP is configured? As per the runtime stats, the referred route for all these routes is 172.16.8.226. (* flag) Both routes in each of the three destinations have been forwarded to the FIB as per the "e" flag.

0.png

User-ID, consistent naming

Greetings! Over time we have collected a variety of user naming formats. For example, domain\user, subdomain\user, user, user@domain and so on. Is there a way to make these names consistent, allowing us to use policies for them effectively? Thanks! Robert

cloughr by • L2 Linker
  • 3690 Views
  • 2 replies
  • 0 Likes

Unable to connect the VPN ( X-Auth Support) from the Linux machine using third party client

Hi Team, ++ We have upgraded the firmware from PAN-OS 10.0.11 to PAN-OS 10.1.8 after we are facing a VPN disconnected automatically for Linux users. ++ The Linux users used to connect the firewall using the third-party VPN agent. ++ We have checked the X-Auth Support configuration and it's looking good. ++ Performed the VPN connectivity ...

Palo's behaviour as a Route reflector

We have Nexus 9k routers "R1 and R2" connected to a silverpeak device which is learning routes from the remote sites. The R1 and R2 are also connected to a Palo Alto firewall which is acting a Router reflector for R1 and R2. We are doing BGP in this setup. R1 and R2 are distributing the routes(Learnt via the Silverpeak device) to the Palo Firewa...

pahee87 by • L0 Member
  • 2374 Views
  • 2 replies
  • 0 Likes

Error should be less than or equal to 2048 characters

Hi everybody We are doing a migration from version 8.1 to 10.2.2h2 and have configured syslog server profiles... We have to customize the format of the logs you have to enter a text, or what happens and that when you enter the text that comes in the reference guide crashes because it exceeds the maximum number of characters, https://docs.p...

Alpalo by • L4 Transporter
  • 3051 Views
  • 1 replies
  • 0 Likes

SCP export error PAN-OS 10.2

Hi there! I have PA-VM (PAN-OS 10.2). There is a possibility to export software to scp server in Device - Software menu. I've set scp server: Then I try to export software version to this SCP server: and an error appears Meanwhile I can export or import by scp to this server in CLI. I've exported mgmt-pcap or device-state. However there i...

Mishin_0-1661336109434.png
Mishin_1-1661336311660.png
Mishin_2-1661336369359.png
Mishin by • L1 Bithead
  • 3474 Views
  • 1 replies
  • 0 Likes

Resolved! Cannot upgrade Cortex XDR from 7.4 to 7.8.1

Hello. We have an issue removing old and installing latest version of Cortex XDR. Device is not showing in PaloAlto console as well. I have red that someone is trying to cleanup system using xdragentcleaner.exe tool, but where can we get it? Thank you in advance! Please note you are posting a public message where community members and ex...

Shared Content-preview Application

Hi Team, I have a doubt with shared content-preview application may i know what exactly it is. Is it the same as applications which we use in the policies? Why do we see that in the CLI configuration when i collect the output in this format? > set cli config-output-format set> set cli pager off> configure# show If we edit any applicatio...

Internet is not working

Internet is not working on broadband and ILL after connecting global protect. but if I connect my laptop to a mobile hotspot and connect to global protect then the internet works fine. can you please suggest why not working internet on broadband and ILL after connect global protect

A weird high latency ping issue with PaloAlto running version 8.1.15 hotfix 3

I have this really weird issue and I don't know how to solve it. I noticed it when I first migrating from Checkpoint over to PaloAlto while doing verification in my Development environment. - A PAN 5050 running 8.1.15 hotfix 3. I have a CentOS host (LinuxB) behind the PAN and another CentOS host (LinuxA) outside the PAN. FW rule is any any all...

dtran by • L4 Transporter
  • 15310 Views
  • 14 replies
  • 0 Likes

Windows 10/11 CLI commands for checking VPN connection and which portal

I have several applications I run on my computer. They require that i am VPN'ed into my company since they use servers on the corporate network. Is there a way to add a check when launching one of these programs (I'm thinking writing a windows batch file to accommodate this) that will check to see that I am connected to VPN via GlobalProtect a...

SE_Guru by • L0 Member
  • 6780 Views
  • 1 replies
  • 0 Likes

Reset MFA- Cortex XDR

Hi all,Want to reset MFA for user who is Managing Cortex XDR admin console. Since am the Super user & Account admin but still unable to find the option to reset MFA. Please help us with the options and steps.

Barakath by • L0 Member
  • 5276 Views
  • 2 replies
  • 0 Likes
  • 24472 Posts
  • 125 Subscriptions
Top Liked Authors
Labels