General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! HIP Notification question

Hi,

 

A question regarding HIP notifications.

 

I have enabled HIP notifications for GP clients connecting in and they trigger when a violation of the HIP profile is detected e.g. firewall turned off, but just wanted to clarify something in the Palo docu

...

BenPrice_0-1637729906099.png
BenPrice_1-1637729949128.png
Ben-Price by L4 Transporter
  • 6806 Views
  • 7 replies
  • 0 Likes

XML output command of ARP managment in 9.1.11

Hello ,

 

I have multiple firewall with running PAN-OS 9.1.11 and above version.

i am facing an issue to generate XML output command of ARP managment.

 

When i run the ARP managment command to set XML output on i am getting the below error:-

 

admin@PA-VM-P

...

License issue

Hello ,

 

we have a customer who renewed the premium partner support

 

When we go to License tab , we can see Premium Partner support renewed 

 

But when i go to Support Tab, it still shows date of 2020

 

Is it cosmetic ?  We already tried to fetch the licen

...

how to configure gre over ipsec?

Anybody know how to configure gre over ipsec ?

from the 9.0,pa support gre tunnel and only one word describe about this feature.

  • (Optional) Select Add GRE Encapsulation to enable GRE over IPSec.
    Add GRE encapsulation in cases where the remote endpoint r
...

Felixcao by L3 Networker
  • 3158 Views
  • 3 replies
  • 0 Likes

Resolved! Static route path monitor shows UP with invalid next hop

I'm running PAN-OS 10.1 on a VM-100. I have DHCP on an interface and use a script to update an address object with the default gateway from the DHCP interface. I have a static route with next hop set to this address object and path monitoring enabled

...

palo-next-hop-0.png
palo-next-hop-254.png

Resolved! IPSec tunnel rekeying

Hi all,

 

We are using tunnel monitor on the IPSec tunnels and i am wondering if rekeying childs SA, causes the tunnel monitor to bring the tunnel down. In additon i would like to know if PA stores a log of all the rekeys for each tunnel.

 

TIA

Issues with Global Protect and Post-vpn-connect

I've opened a ticket with Palo and haven't had much success.  I am trying get the drive mapping script to run and it gives me an error 1008.   Below are the logs for gpservice. Few things I have noticed and tried:

1)it is using my adminacct yet i am l

...

How to Convert Device Specific objects into Shared

Hi everyone,

 

Hope everyone is doing Great. 

 

I have one question regarding the shared objects and here is the problem I am facing.

 

I am trying to find the best way to convert device specific objects(addresses, services, tags) into shared objects. I wa

...

Resolved! How Palo alto HA and Cisco HSRP work together ?

How Palo alto HA and Cisco HSRP work together ?

 

For example 

===========

Here Palo alto HA is upstream devices ( lets consider PA1 and PA2 are in HA setup). 

Cisco Switches are catalyst 6509 or nexus 5 or 6K ( SW1 and SW2)

SW1 is connected to PA 1 and SW

...

perumalj by L2 Linker
  • 5977 Views
  • 4 replies
  • 0 Likes

Physical connections to vSphere cluster for VM-200

Hey folks,

 

Can someone point me to a "best practice" design guide or white paper for making the physical connections to a vSphere cluster that will run a VM-200 virtual appliance? I'm only seeing configuration guides on deploying and setting up the

...

markdean by L0 Member
  • 1657 Views
  • 1 replies
  • 0 Likes

2 subnets on the same interface

We current have 1 subnet linked to an layer 3 interface which is supplied by our isp. We have run out of ip addresses and our isp want to present another subnet but on a completely different range. (too many services to move to a new range)

Is it just

...

  • 24010 Posts
  • 102 Subscriptions
Top Liked Authors
Labels