This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Dual PA220 Active-Active with Active-Active Service Provider Links and GP Autofailover

Hello Family, I have a pair of PA220 in Active/Standby mode, I know datasheet of PA220 is as below: Firewall throughput (HTTP/appmix)* 545/535 Mbps Threat Prevention throughput (HTTP/appmix)† 265/320 Mbps IPsec VPN throughput‡ 550 Mbps Max sessions 64,000 New sessions per second§ 4,200 I already have a 250Mbps service provider internet lin...

Resolved! NATing down an IPsec tunnel

I've got a PA-850 with fairly typical many-to-one NAT outbound to the internet, and some IPsec tunnels. Due to one partner that I'm connecting to with IPsec using 10.0.0.0/8 on their network (don't ask), I need to NAT my 10.28.1.0/24 subnet to 172.28.1.0/24 going to/from their end. I've got a working tunnel for two other subnets (a 172.19.x.x an...

Resolved! UserID agents tab in version 10

Hi, I was checking the useridagents in the typical site (DEVICE-USERID->AGENTS) in version 10 and i can not find this tab. how to configure a new userid agents in version 10 and later?

BigPalo by • L4 Transporter
  • 2729 Views
  • 1 replies
  • 0 Likes

Resolved! Access errors while adding firewall to panorama

Hi everyone, When we add our firewall to panorama, we faced with some issues. Access problems occurred due to LDAP profile password and PSK in IPsec tunnels. We had to back to our old configuration and delete firewall from panorama. As we know there are major difference on their versions but all goes by book. I will mention the versions below. A...

Certification badges from Credly?

Hello everybody, perhaps this is a silly question, but... This morning I received a bunch of emails from "[email protected]" saying that I've earned some badges from Palo Alto Networks. Inside the messages I can find links to "accept" my PCNSE, PCNSA, PSE, etc. badges. The strange thing here is that I got my PCNSE and PCNSA certifications ear...

grenzi by • L3 Networker
  • 4749 Views
  • 1 replies
  • 0 Likes

User Group limits on firewall

Hello, Recently I got error below on PA 850 device(8.1.13)-User Group count of 1098 exceeds threshold of 1000 The log is straight forward, number of group is exceeding the limit, but I have some question. 1. I have one more device,PA-3220, which look same LDAP for group mapping(same configuration).I found article about this and it says FW has li...

yhlee1 by • L2 Linker
  • 9903 Views
  • 2 replies
  • 0 Likes

GlobalProtect Split-Tunnel - Some Clients get Invalid Address Errors to Excluded Domains

We've published GlobalProtect 5.0.5 I added some Exclude Domains and Applications to our Gateway's Split-Tunnel configuration over the weekend. Afterwards, about 5-10% of our VPN clients can not access these domains at all while on VPN. The domains work fine when disconnected. We've had reports of problems with Mac and Windows, but all of my ...

Resolved! Log : disk usage for / exceeds limit, 95 percent in use, cleaning filesystem

Dear Team, I checked the following log in the system log. > disk usage for / exceeds limit, 95 percent in use, cleaning filesystem However, when checking with the 'show system disk-space' command, the free space is checked as shown below. I know that if the disk capacity is full, it is necessary to take action through the 'debug softwa...

CHOEKyungJun_0-1659340889213.png

Resolved! adding Switches to HA Pair

I would like to add a 24-port switch to each Palo. To maintain HA redundancy, I just have to run the HA Control across the switches right? Does the Session Link have to go through the switches too?

i have the palo alto vm 10.0.3 version , need help

Using this image for labbing on EVE-NG pro and i cannot create a working active standby cluster as both instances of the node that i created have the same serial number, is it possible to change the serial number of the node upon creation? what is the solution? i do have 9.1.2 which might work for clustering but this is the only 10.x image i h...

kbk983 by • L0 Member
  • 2166 Views
  • 2 replies
  • 0 Likes

Config changes retention in Palo Alto For non root user with read only admin access

Config changes retention in Palo Alto For non root user with read only admin access Hello All, I have recently come across the issue of read only admin access config change 10-15 days back but same not reflecting in the commit when I checked. So, my main query is that for many days the changes will remain as it is in commit for read only adm...

LalitaS by • L0 Member
  • 1768 Views
  • 1 replies
  • 0 Likes
  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks