General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 2884 Views
  • 2 replies
  • 14 Likes

GlobalProtect Split tunneling support on Chrome OS

We have implemented split tunneling in GP configuration for operating systems including Windows, iOS, and ChromeOS. It is working on all devices except Chromebooks. Doing further research, we are not very clear whether split tunneling is supported on

...

JatinSingh_1-1630476320899.png
JatinSingh_0-1630476280089.png

Resolved! FQDN with 80 characters not resolving in Address object

Hi All,

 

I have a client running PAN OS 8.1.3 Panorama 9.1.3, that is trying to implement an Address object with an FQDN that is 80 characters long. When clicking the resolve button in the Address object GUI it does not resolve. When running the comma

...

Ben-Price by L4 Transporter
  • 2501 Views
  • 2 replies
  • 0 Likes

How to connect MineMeld to MISP

I tried following the steps at GitHub - PaloAltoNetworks/minemeld-misp: MineMeld nodes for MISP but to no avail.  My searches for other sites or resources have not proven successful.  Can someone point me in the right direction so I can integrate our

...

Gmail, Me email not being allowed through on Mac Mail

Hi,

I use gmail.com and me.com for email.

when I used the web interface, no problem at all.

But when I use my Mac (OS X 10.6.6) Mail client 4.4, however I for some reason or another the client cannot access these two email accounts it just times out.

...

djbisbey by Not applicable
  • 3182 Views
  • 3 replies
  • 0 Likes

Resolved! Exclude all Zoom traffic from GlobalProtect VPN

We have been trying to exclude all Zoom-related traffic from the GlobalProtect VPN tunnel.

 

So far we have tried with: "*.zoom.us" exclusion configured directly on the GP gateway as a domain in:

Network --> GlobalProtect --> Gateways --> GW NAME --> Ag

...

MarcelST by L3 Networker
  • 53018 Views
  • 59 replies
  • 0 Likes

User-id agent secure connection using enterprise CA

We are using one user-id agent for four locations and want to use enterprise CA cert to resolve vulnerability detected on port 5007.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGFCA0

 

Have below queries :

1. Can we genera

...

Deepak25 by L3 Networker
  • 1986 Views
  • 2 replies
  • 0 Likes

U-turn Nat between isolated networks

Hey Guys and Gals

 

I am having an issue getting u-turn nat to work between two isolated networks on the same Palo.  I am basically tiring to allow Interanal clients to access a webcam server in a IoT network.  I think might issue might be that I need

...

u-turn Nat.jpg
trees by L1 Bithead
  • 4077 Views
  • 3 replies
  • 1 Likes

Palo Alto multiple configuration for log forwarding

Hello,

I am in the process of setting up a server for syslog relay to Azure Sentinel. Currently my Palo Alto systems forward their CEF logs to LogRythm. I am looking for a way to set up my Palo Alto to forward the same logs to the new syslog relay se

...

Ematek by L0 Member
  • 1419 Views
  • 1 replies
  • 0 Likes

Spotify and URL Filtering

Hello

 

Spotify, besides being detected as a application, connects to certain URLs for information.

 

What URLs are these? Id like to making a URL Filtering category so I can allow this traffic to pass.

 

Thank you.

riahc3 by L1 Bithead
  • 1898 Views
  • 2 replies
  • 0 Likes

Anyone else have a ton of these?

URL filtering I keep seeing lots of clients for this URL:

 

play.google.com/log?format=json&authuser=0

 

Anyone know what application can be causing this request from the client PC?

 

Block domains using EDL

Hi,

 

We are doing test in order to block the domains using EDL but its not working. We are doing test with this domain: unrealengine.com

This is the config:

 

The domain is added to the EDL domain list:

 

The antispyware profile is created with the list:

 

T

...

Minemeld1.JPG
Minemeld2.JPG
Minemeld3.JPG
Minemeld4.JPG
BigPalo by L4 Transporter
  • 2822 Views
  • 2 replies
  • 0 Likes

use of binaries in Global Protect

Hello

 

I want to know if the binaries  wa_3rd_party_host_32.exe and wa_3rd_party_host_64.exe are essential for use in Globlal Protect, and what service of Global Protect are use these.

I see this articule:

https://knowledgebase.paloaltonetworks.com/KCSA

...

BigPalo by L4 Transporter
  • 3111 Views
  • 1 replies
  • 0 Likes

Solution for "SSL decryption bypass for Anydesk"

Hello,

 

I am being asked a lot about why is Anydesk getting a "decrypt-error" end reason when SSL Decryption is active.

Here is a simple explanation and how to overcome this.

 

What you usually going to do with this kind of errors is creating a Decryptio

...

OZamir by L1 Bithead
  • 12470 Views
  • 4 replies
  • 6 Likes

Recommended ways to manage numerous firewall policies

For people who have many firewalls which have similar policy, what are good ways to manage these, say for example I want to add a particular rule from one zone to another, and the zones are identical across 80 firewalls.

 

Am looking at using Device Gr

...

  • 24016 Posts
  • 99 Subscriptions
Top Solution Authors