This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

unable to renew device certificate

Hi everyone, i'm having an issue regarding the device certificate on a pa-440 panos 10.1.6-h3 at the moment i am getting a a message device certificate not found. but u don't have any options to get a new one in the GUI. is there a way to trigger the check for a certificate in the CLI ?

Devicecert PA 440.jpg

Shadow Rule warning

Hello When apllying a rules in PA I get the warning message re shadow rule.I have two rules where rule 1 allows SSL between source and dest on standard SSL port rule 2 allows SSL between the (same) source and dest on a non standard SSL port I get a warning about rule 1 shadowing rule 2 How can I combine ther two rules so that I do not get that...

RC-BHF by • L2 Linker
  • 6983 Views
  • 6 replies
  • 0 Likes

no RAID menu in maint mode for 5400

Hi all, I can't find RAID menu in maintenance mode for 5430 appliance. It definitely was earlier (at lease in 5200 series) so I was able to copy data from old SSD to a new one. even in the guide there is instruction for this RAID menu option (step 11 in the link below) https://docs.paloaltonetworks.com/hardware/pa-5400-hardware-reference/service...

Unknown.jpeg
goldandy by • L0 Member
  • 2447 Views
  • 2 replies
  • 0 Likes

Custom URL category issue

I have read through a number of URL category issues, but I just cannot find something like this and I am baffled so far. I have two users, inside and outside, that access a certain internal webserver. What I am trying to do is the following. outside: allow: a.b.com/sites/outside and a.b.com/sites/common block: a.b.com (the rest of the site) insi...

Netflow is not working after upgrade to the 10.1.6-h6, is it somthing know issue in 10.1.6-h6 PAN OS version

Netflow is not working after upgrading to the 10.1.6-h6, is it something know issue in the 10.1.6-h6 PAN-OS version? Firewall- PA-3220 I have checked the NetFlow statics and seen that the firewall is sending the NetFlow log. for reference, I am also attaching the TCP dump snapshot. Can someone advice me please

tcp.doc.jpeg

HIP object for Disk Encryption Criteria

Hi everyone, Can I check for Prisma Access HIP object for Disk Encryption with BitLocker with the option to check encrypted location (eg C:, D:) is Encrypted?Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not rec...

Facing VPN connectivity issues by using an external gateway in global protect

Model: PA-450 We cannot connect remote VPN from outside of our network by using public IP but connect from the internal network by internal private IP of the PaloAlto direct interface IP. Note: PaloAlto firewall is running behind our internet router.We just port forward to the PaloAlto VPN gateway private IP of interface from our internet r...

Inspection of traffic with PPPoE headers

I'm attempting to use a PA-440 in vwire mode to inspect traffic that is on the internet side of a broadband modem for security analysis. The traffic passes through the PA ok but non of the security policies seem to be triggered and no traffic logs are generated. Does anyone know if the Palo Alto firewall will inspect traffic that contains a PPPo...

Resolved! Home Lab Setup - PA VM + Windows 10 (Vmware)

Hi guys, I have a beginner's question I'd like to ask. I want to set up my own home lab on VMware workstation 16 and something doesn't add up. First, my simple network topology is the following:My home network is on a 192.168.1.X network (default gateway 192.168.1.1) .I have a PA-VM 10.1 with a management ip of 192.168.1.222 (default gateway 192...

echahine by • L2 Linker
  • 13132 Views
  • 5 replies
  • 0 Likes

¨Password reset is not allowed in the user's current status" for a new account

A new user for the support portal created a PAN account and received the activation mail and clicked the link. User now receives the message "You account is now activated". User forgot the password he set. When he now tries to use the password reset functionality and enters the newly created account's email address and Captcha Code the page resp...

daubsi by • L1 Bithead
  • 4350 Views
  • 3 replies
  • 0 Likes

Resolved! Cookie and User Password both expired

A user while connected over VPN has his password expired and does not renew in time. So the local system will have the information that account is expired and would not let login. Also during the same time GP cookie expires and that means there is no pre-logon tunnel that enables password reset remotely by user himself. Is giving local admin p...

raji_toor by • L4 Transporter
  • 3338 Views
  • 2 replies
  • 0 Likes

Resolved! Syslog configuration to Sumo Logic in PAN-OS 7.1

HI, all.I'm looking for some reference of integration with Sumo Logic for Syslog setting. My customer wants to receive logs from PA FW.I'm looking at guides both Sumo logic web site and Live community in here,but I think there's more information needed. Or I'd configured in wrong way. Syslog Server: syslog.collection.us2.sumologic.comTransport: ...

syslog-configuration-file.PNG
system-log-file.PNG
token-file.PNG
  • 24411 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks