This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4144 Views
  • 0 replies
  • 0 Likes

Resolved! Login issues after password complexity change

We changed the password complexity and history settings on our firewall a couple of days ago.After committing the changes the local users are not able to login on the firewall.So we tried to boot into maintenance mode by connecting through a console cable in order to roll back to a older running config.This did not do anything though, because th...

ilirrama by • L1 Bithead
  • 5531 Views
  • 5 replies
  • 0 Likes

Are there options in the Palo Alto SaaS Security Inline to block in real time cut/copy/paste/print activities?

Are there options in the Palo Alto SaaS Security Inline to block in real time cut/copy/paste/print activities? I have seen this some other CASB solutions to limit what the web browsers can do in real time not out of band (Palo Alto SaaS Security API) I just wanted to ask as I can't find it.

How to check the utilization of current firewall (eg. sessions, throughput, etc)

Hello,we have plan to upgrade our current PA-3020 firewall to new PA firewall.I would like to know how to check the overall utilization of currently firewall in order to determine the size of new firewall. (eg. the usage of sessions, throughput, total users, etc)I found some cpu and session info under PA Dashboard System Resource and ACC tab but...

zinkt101 by • L1 Bithead
  • 5368 Views
  • 2 replies
  • 0 Likes

Resolved! Max allowed additional IP addresses on a layer3 interface

From what I researched the below is the only guidance I could find on the max number of IPs I can put on a layer3 interface. Does anyone know where I can find the specific information per model? "You can enter multiple IP addresses for the interface. The forwarding information base (FIB) your system uses determines the maximum number of IP addre...

DHCP-DNS server integration posisble on a PA-500?

Hi, Is it possible to configure a DHCP server running on the PA-500 to automatically update the records in a DNS server that is separate from the PA-500? Ideally, I would like to have the DHCP server dynamically update DNS records with the DHCP client computers’ information whenever the DHCP server assigns the IP address. Thank you in adva...

PLT_IT by • L0 Member
  • 4269 Views
  • 3 replies
  • 0 Likes

sip port 5060 same in source port and destination port

Facing issues regarding traffic flow on PA.Cannot see traffic on PA when the SRC port is 5060 and the DST port is also 5060 and application SIP.Have a rule which permits all the traffic from the source to the destination with all the ports allowed ( Any ).Session end reason - Unknown

Question about NAT

How can you use dynamic source translation with dynamic source address. This is my scenario. Site one Public NAT 1.1.1.1 source address 192.168.2.1Site two Public NAT 2.2.2.2 source address 192.168.3.1 If I want to combine this rule into one Nat rule can I do that? Can't use interface because we have 150+ Nat policy. I used dynamic source addr...

hpatel11 by • L2 Linker
  • 2208 Views
  • 1 replies
  • 0 Likes

How to check VLAN untagged on ae interface and physical interface with L3 subinterface

Hello all,We would like to proceed with the connection between Cisco ACI and Paloalto firewall regarding this server configuration change. Is there a difference in how to check the VLAN untagged of the Ae interface with L3 subinterface and the physical interface? - If you connect the physical interface (eth1/5) separately from the current Cisco ...

No data in Custom reports

Hello, I'm using verson 8.1.7 (upgradede last week) in Panorama and firewalls 7050.I have defined custom reports added to report groups nad this report groups defined in Email scheduler to send it every Monday.If I do "Run now" in the custom report all data appear as expected, but when the same report is sended by email no data is displayed.What...

Captura.PNG
bprietoc by • L1 Bithead
  • 9999 Views
  • 8 replies
  • 2 Likes

Resolved! After OS upgrade, CPU keeps high value

Hello all,Our customer is using PA-3060, and we upgraded the OS on June 19. (8.1.x -> 9.1.x) Although the CPU may go up due to OS upgrades, according to them, device that used to use cpu at 40-50% but it is maintained at 60-70% and sometimes cpu usage goes up to 100% after Os upgrade. In addition, three days have passed, but the symptoms stil...

how does two or more snmp communities?

Two snmp community values need to be set, but only one community value is included.Can I put only one community in the SNMP Community String?If anyone knows, please share the contents.

qmso475 by • L3 Networker
  • 3654 Views
  • 3 replies
  • 0 Likes

Traffic logging issue from firewall to Panorama

Log-collector status show as active and connected. Checked the logging status and based on the time stamp, observed that log creating and log forwarding are stopped. So panorama is not showing a logs for pair of PA-850 firewalls. We have tried restarting the management server on managed firewalls but it didn't helped. Any suggestion and helps ar...

  • 24340 Posts
  • 124 Subscriptions
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks