General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Thank You for Filling Out the LIVEcommunity Experience Survey!

If you've visited LIVEcommunity anytime recently, you've probably seen a pop-up asking for your feedback. We've deployed this survey since April 2020 for new and returning visitors alike as a way to gather feedback from our users. 

 

In the past six

...

survey-livecommunity.png
jforsythe by Community Team Member
  • 14490 Views
  • 1 replies
  • 4 Likes

PA3250 - L2 - L3 interface communication

Hi Team!

 

I have simple topology ( pls see at the picture). 

I configured eth 1/1 ( for PC2) as L2 interface, but without Security Zone. 

I want to ping from PC2  - default Gateway (AE1.121) and PC1. 

 

Is it possible to set up Palo Alto like this?

 

Pls, g

...

PA_NX.JPG

Chromebook Global Protect failing

I have Setup Global Protect but my chromebook is failing to connect, I thought my config was dud but I have just tried to connect with my macbook and it works exactly as it should. 

 

I can't see why the chromebook wouldn't work, clearly the setup must

...

Resolved! Internet access

Hello all, 

 

we have installed proxy server to DMZ now I wants to allow internet access to LAN user . What would be my security policies for LAN user to access internet through proxy server

I have created two policies

1. From trusted zone to DMZ 

 Source

...

Source IP issue. *Urgent*

Hi team,

 

I am facing the source IP mismatch region .

This is the IP 41.139.156.142 which shows up from Kenya, i have confirmed from https://ping.eu  & https://threatvault.paloaltonetworks.com/ 

but in firewall traffic log it show like this IP belongs t

...

Palo Alto OSPF neighbor confusion

I have two down stream layer 3 switches both active running HSRP connecting to the active palo alto. Switch 1s interface connecting to the palo alto is set to ospf priority 10, switch 2s interface facing the palo alto is set to ospf priority 5. For s

...

Upgrade OS from 8.1.x to 9.0.x Boot Loop

Upgrade PA-850 from 8.1.5 to 9.0.6 Boot Loop

Hi,

I want to ask if anyone have experienced upgrading Palo Alto from 8.1.x to 9.0.x and worked it out, because i didnt.

Last night was my nightmare, i tried to upgrade PA-850 straight from 8.1.5 to 9.0.x. Fo

...

Resolved! Not Blocking EICAR June/2020

PA220, running 8281-6129 

If I go to https://www.eicar.org/?page_id=3950 and try download test files using http,  the firewall is not blocking of the download.

 

If I go to the old site,  http://2016.eicar.org/85-0-Download.html , the firewall will bloc

...

DHCP option 43

Hello,

 

Can we use Option 43 without Vendor Class Identifier, In GUI without VCI I can't select ok. If client doesn't use option 60 with DHCPREQUEST then what we do ?

 

Matt

Mathew42 by L1 Bithead
  • 2506 Views
  • 4 replies
  • 0 Likes

destination nat from Mikrotik router to Palo ato

hello 

i am about to transfer from Mikrotik router to palo alto i have one issue i don't know how to do it in palo alto 

i have some servers with privet IP address and ports (web-server and database server) and these servers need to be accessible from

...

JALAL79 by L0 Member
  • 1544 Views
  • 2 replies
  • 0 Likes

Both LACP interface ethernet1/2 moved out of AE-group

We've a PA-3050 up and running for over a year now. It is configured with an agregated interface with LACP enabled (mode active, transmission rate Fast). These interfaces are attacheced to a procurve 5406 where the interfaces on the procurve are conf

...

Sjoerd by L2 Linker
  • 11528 Views
  • 19 replies
  • 1 Likes

BGP RIB out and Local RIB

Can someone explain me the difference between RIB out tab and Local RIB in BGP.

 

What is contained in RIB out and  Local RIb?

Also what is pupose of Import and Export tab in BGP

 

Appreciate your help.

 

-Rajaram.

Top Solution Authors
Top Liked Authors