This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Facing VPN connectivity issues by using an external gateway in global protect

Model: PA-450 We cannot connect remote VPN from outside of our network by using public IP but connect from the internal network by internal private IP of the PaloAlto direct interface IP. Note: PaloAlto firewall is running behind our internet router.We just port forward to the PaloAlto VPN gateway private IP of interface from our internet r...

Inspection of traffic with PPPoE headers

I'm attempting to use a PA-440 in vwire mode to inspect traffic that is on the internet side of a broadband modem for security analysis. The traffic passes through the PA ok but non of the security policies seem to be triggered and no traffic logs are generated. Does anyone know if the Palo Alto firewall will inspect traffic that contains a PPPo...

Resolved! Home Lab Setup - PA VM + Windows 10 (Vmware)

Hi guys, I have a beginner's question I'd like to ask. I want to set up my own home lab on VMware workstation 16 and something doesn't add up. First, my simple network topology is the following:My home network is on a 192.168.1.X network (default gateway 192.168.1.1) .I have a PA-VM 10.1 with a management ip of 192.168.1.222 (default gateway 192...

echahine by • L2 Linker
  • 13241 Views
  • 5 replies
  • 0 Likes

¨Password reset is not allowed in the user's current status" for a new account

A new user for the support portal created a PAN account and received the activation mail and clicked the link. User now receives the message "You account is now activated". User forgot the password he set. When he now tries to use the password reset functionality and enters the newly created account's email address and Captcha Code the page resp...

daubsi by • L1 Bithead
  • 4389 Views
  • 3 replies
  • 0 Likes

Resolved! Cookie and User Password both expired

A user while connected over VPN has his password expired and does not renew in time. So the local system will have the information that account is expired and would not let login. Also during the same time GP cookie expires and that means there is no pre-logon tunnel that enables password reset remotely by user himself. Is giving local admin p...

raji_toor by • L4 Transporter
  • 3383 Views
  • 2 replies
  • 0 Likes

Resolved! Syslog configuration to Sumo Logic in PAN-OS 7.1

HI, all.I'm looking for some reference of integration with Sumo Logic for Syslog setting. My customer wants to receive logs from PA FW.I'm looking at guides both Sumo logic web site and Live community in here,but I think there's more information needed. Or I'd configured in wrong way. Syslog Server: syslog.collection.us2.sumologic.comTransport: ...

syslog-configuration-file.PNG
system-log-file.PNG
token-file.PNG

Clientless VPN question

Hi All, I have a query for Clientless VPN. I have a working solution which is suitable for a normal user. Unfortunately I seem to have abnormal users (don't we all really) who are complaining that there are too many log ons. They have to log on to Clientless VPN and then log on the the RD Web session that is offered to them. Is there a way we co...

a.jones by • L3 Networker
  • 3952 Views
  • 3 replies
  • 0 Likes

Resolved! Reconnect GlobalProtect

Hi, Is it possible to reconnect Global Protect is the signal in the phone recovers. I explain: We have phones with internet 4g and global protect connected. The signal in the place is low so sometimes the internet flaps but the Global protect not reconnect. Is there any paramether to connect global protect is internet is recovered? thanks

BigPalo by • L4 Transporter
  • 2657 Views
  • 2 replies
  • 0 Likes

cloudgenix webinar

I recently joined an company and they are using ION, is there any videos or webinar that I can watch to get familiar with the ION. I'm very good with VeloCloud but ION is new to me. Thank you!

SamerQ by • L1 Bithead
  • 3346 Views
  • 5 replies
  • 0 Likes

Uninstall issues, ex work laptop.

My ex work laptop has Cortex XDR 7.7.1.62043 installed, and I cant get it uninstalled. I have admin, but cant get anti tamper off so cant go the usual uninstall route, if I use msiexec /x it cant find the program. Need to get it uninstalled as it is blocking all activity to the internet. Suggestions please. Thanks

DUAL Dynamic IPSEC Tunnels single VR

Hi , have 2 dynamic isp at site 1 with single vr and ECMP and 1 public ip at site 2 paloalto at OCI cloud , i have setup dual tunnels from site 1 to site 2 but its not stable at all , both tunnels will be up but if we simulate failover using either path monitoring or tunnel monitoring or making isp 1 or 2 down we can see that vpn is stuck in in...

Resolved! DNSSEC broken for updates.paloaltonetworks.com

My organization uses the MS-ISAC MDBR public DNS resolver service. I received reports that this service was unexpectedly blocking resolution of updates.paloaltonetworks.com. I inquired and received the following explanation:"The DNSSEC for that domain is broken. Since that means the records couldn’t be confirmed to be legitimate, the MDBR servic...

Traffic logs only available for last 9 days on PA 3220

On my PA -3220 SW version: 10.1.2, /opt/panlogs/ is around 74% and 32 GB space is available out of 126 GB in panlogs. I have verified the traffic logs and also generated the user activity report, they only show traffic logs for last 7-9 days. Also, in GUI: Device > Setup > Management > Logging and Reporting Settings > Log Export an...

  • 24430 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks