This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

BGP AS-Path allow

Hi All, I suspect the answer to this is in the Advanced Routing in PanOS 10. We have configured a new system as Active-Active and BGP. The firewalls are in different DCs, the DMZ side of the firewall can talk to routers in both DCs but only its local router on the WAN side. If one DC goes down, the other firewall with a less favourable route...

a.jones by • L3 Networker
  • 4311 Views
  • 3 replies
  • 0 Likes

Allow traffic other than IPSec

Hi all, Site A Source Zone: test-DMZ Interface: ae 1 (172.16.1.1) Tunnel Interface is in internal-trust zone. Static route set to destination 10.10.10.1 I have an IPsec tunnel between 2 sites. However, i want to allow traffic from other sources to test-DMZ zone. How can i deploy policy that will allow me to communicate from test-DMZ to outs...

mike.07 by • L1 Bithead
  • 2049 Views
  • 2 replies
  • 0 Likes

How to whitelist specific URL with path included.

I want to whitelist a specific URL with path. Eg: https://live.paloaltonetworks.com/t5/forums/postpage/board-id/members_discuss I tried adding it the same as it is in URL category and created the following rule: Source: Ip of source Destination: ANY Port: https Service/URL category: above mentioned URL ( https://live.paloaltonetworks.com/t5/foru...

Amey05 by • L0 Member
  • 3018 Views
  • 1 replies
  • 0 Likes

Active-Active Firewall - BGP failure condition

Hi All, How can I instigate a firewall failover for an Active-Active firewall if BGP fails? I feel I need a full failover but please tell me if I am wrong. Here is the situation: Firewall in Active-Active mode, HA1,2 and 3 up. BGP peering on outside and inside interface. 1 BGP peer on outside to local cpe. Inside peers to local cpe and remot...

a.jones by • L3 Networker
  • 2423 Views
  • 1 replies
  • 0 Likes

Unable to Login After Factory Reset

Hello Community, I have just carried out a factory reset. However, now I'm not able login with the admin-admin login/password. I'm presented with the prompt: PA-HDF login: I read I should wait for the prompt: PA-500 login: However, the PA keeps on rebooting into PA-HDF login: and the admin/admin login password won't work. Any he...

reset qos application statistics

Hi all, I was wandering if there's a way, under network -> qos ->statistics, to reset the application list of an interface. These list are never refresched and contain applications that are no more seen. So I really would like a fresh start in order to understand which applications are matching a certain QoS profile. Hope I was clear...

DNS security license

French Arab milf an*l f*cked - https://livesex.runPegging bisexual cuckold and shemale - https://sexcam.redCloseup titf*ck and bl*wjob - https://livesexcams.work

Leohec by • L0 Member
  • 2350 Views
  • 1 replies
  • 0 Likes

Resolved! Suspected Credential Phishing Detected

Hi! Users connecting to our network via VPN receive "Suspected Credential Phishing Detected" when attempting to log into our in-house equipment reservation webpage. The URL filtering log indicates a blocked URL action on category "government". I've tried to adjust the group profile item in the associated rule for the "government" category fr...

Resolved! Nested Device Group in Panorama

How to create nested device group in panorama, is the same device group can be part of multiple nested device group. If yes, how the policy priorities would be. Please suggest here.

Sujanya by • L3 Networker
  • 5172 Views
  • 4 replies
  • 0 Likes

NAT without braking current IPSec

Hi All, Need some help regarding my dilemma. IPsec tunnel between Site A and Site B. Static route for this tunnel is setup to forward traffic to only on subnet (10.100.x.x). I am working on updating patches on server that is under Site A. I need a solution to allow traffic from internet site to the server IP that is on Site A. is there a NA...

mike.07 by • L1 Bithead
  • 2747 Views
  • 3 replies
  • 0 Likes

PCI DSS 3.2.1 Responsibility Matrix for SaaS Services

I've been looking for any details from Palo Alto regarding the responsibility of controls for PCI 3.2.1 when it comes to SaaS and PaaS offerings such as Prisma Access, Wildfire, XSOAR, XDR, etc. Most service providers will publish a 'responsibility matrix' that will define what the service provider is responsible for and what the consumer is. ...

mslavens by • L1 Bithead
  • 4314 Views
  • 2 replies
  • 0 Likes

PA-220 maximum PAN-OS version

Hi All, May i know what is the maximum version of PAN-OS supported by PA-220. I am migrating PA-500 to PA-220 can i just import the config snapshot directly from PA-550(PAN-OS: 8.1.18) to PA-220(PAN-OS: 9.1.0)? Please suggest. If there is any link which will give all models Maximum and Minimum versions of PAN-OS support that will be helpful. R...

Panorama - Administrators user - Required Password Change Period (days) - Pan-OS 9.1.14

Panorama - Administrators user - Required Password Change Period (days) - Pan-OS 9.1.14 Good afternoon, Thank you for your collaboration and your time I am doing some tests in relation to Minimum Password Complexity -Enabled, mainly to force the password change in X days. When I set Required Password Change Period (days) with value of 3 days...

Metgatz by • L4 Transporter
  • 2911 Views
  • 2 replies
  • 0 Likes

Resolved! Global Device/Setup Authentication Settings vs Device/Setup/Authentication Profile

Global Device/Setup Authentication Settings vs Device/Setup/Authentication Profile Hello good afternoon, thank you very much for the usual collaboration. I have the following doubt, at Global level in Device/Setup Authentication Settings there are parameters such as: Failed Attempts and Lockout Time and also if I create an Authentication pro...

Metgatz by • L4 Transporter
  • 3129 Views
  • 2 replies
  • 0 Likes

[ASK] Newbie Guide Installation - Failed Booting paloalto-9.0.4 on Eve-NG

Hello guys, I'm a newbie and want to learn about Palo Alto Firewall. I have some problem with booting up Palo Alto in Eve-NG. It appears like this when booting up Palo AltoSpoiler (Highlight to read)Booting 'PANOS (sysroot0)'root (hd0,1)Filesystem type is ext2fs, partition type 0x83kernel /boot/vmlinuz ro root=/dev/sda2 init=/sbin/init_single_co...

  • 24483 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks