This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! App-ID

Good Morning, I am currently working with a PA 3220 firewall that has no licenses. Does App-ID work right out of the box without a license? On security policies I see under the ‘apps seen’ column it is identifying apps. If you use the apps found under the apps seen column will it work? Can you update apps without a license? I was a last minute a...

jaah1231 by • L0 Member
  • 5253 Views
  • 2 replies
  • 0 Likes

Configure HA3 on a non HCSI interface for PA220

Hello Everyone, Need to put my PA220s in active-active mode, I know they do not come with a HSCI port, can I use a normal Gigabit interface for my HA3 interface and just set them to HA? Should I be worried about any stability or performance issues doing that? And I am guessing jumbo frames would still be needed here right? Thanks.

Resolved! Certificate Error in GP

Hi Team, I am getting below error while try to connect to GP. When I am try to connect to the portal getting this error, any suggestions? before it was showing continue but not it is not showing. Usually it will give the option to proceed anyway but it is not giving that option. After Reinstallation it is giving that option.

SubaMuthuram_0-1661322421146.png

Issues with resolving Xsoar DNS Alias

Hello, I am hoping someone here may be able to guide me. My company is using Xsoar, and we are having an issue with resolving DNS alias for it. The servers resolve to an AWS url. Half the time it resolves the other half it does not. Even support.paloaltonetworks.com there is an issue resolving half the time. It is intermittent it seems. I looked...

Suitable Palo Alto Firewall

Hi everyone , I have an enterprise network and two simple outside networks that are connected to the enterprise network via Firewall. The enterprise network includes 50 windows users and 2 windows servers and storage. I intend to install a Palo Alto Firewall with Internet access and two external networks. I would appreciate your help in advising...

Resolved! Explanation for why all applications are not available for PBF

Hi All, Just wondering if anyone can explain why the application objects have thousands of objects, but when attempting to create a policy based forwarding rule for a specific app (in my example, ms-teams), it does not appear in the drop down options in the Application drop down. Can anyone guide me on the best way to setup PBF for ms-teams? Th...

ccarter by • L1 Bithead
  • 9212 Views
  • 4 replies
  • 0 Likes

Paloalto TAC support

Anyone here using Paloalto products happy with TAC support? I do not use TAC often but it seems like there are not enough TAC engineers to provide support to customers. For example, every time I call into PAN phone support, the average wait time is 25 minutes. As for a specific example,I called into Paloalto TAC support this morning, and I've ...

dtran by • L4 Transporter
  • 18178 Views
  • 19 replies
  • 1 Likes

Resolved! Suggestion for support

Hi I notice a lot of my other venders allow for uploads direct from their device. Can palo alto do that. if I go to the support page for the device there should be an option to upload direct from the device with a case number or something like that. save me having to download - usually over slower comms and then re upload Simple thing, mak...

Panorama Legacy to Panorama mode Log Migration

I just completed moving a Panorama VM from Legacy mode to Panorama mode. Panorama is running 9.1.14-h4. What I'm concerned about are the existing logs. From a document I read, you needed to run the following command request logdb migrate vm start then run request logdb migrate vm status to check the status. When it's done it should show "migr...

BaudMatt by • L1 Bithead
  • 3017 Views
  • 1 replies
  • 0 Likes

Block domain while permitting some access.

A group within my company would like access to, we will just call it, xyz.com/blog, but we currently block xyz.com via an EDL based policy. We are also not decrypting this groups traffic as it causes issues with some of their connectivity, so options are limited in that respect. I added xyz.com/blog to our whitelist just to see if it would work,...

Resolved! Is there entry limit when resolving FQDN?

When I tried resolve the FQDN, abc.com, and it shows 4 IP address of 54.192.150.W, 54.192.150.X, 54.192.150.Y, 54.192.150.Z use this address ipv6 not resolved. After I performed 'request system fqdn refresh force yes’ The resolve FQDN shows another 4 IP address of 13.33.33.W 13.33.33.X use this address 13.33...

Wenwei_Y by • L0 Member
  • 5973 Views
  • 3 replies
  • 0 Likes

device template stack values staying in overide mode, shared template values not passing through on template stack

hello, anyone ever have this following issue. on some of our template stacks the shared template values are not passing through to the template stack. in the template stack some values come through from the device template but the shared template (which is delow in order the device template stack) values do not come through but only on some fiel...

miguelMA by • L2 Linker
  • 2575 Views
  • 2 replies
  • 0 Likes

Resolved! vsys1 - User-ID Hub

Hello - Can someone explain the difference between "vsys1 - User-ID Hub" and another of my palo's that just has "vsys1"?

  • 24476 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks