General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4119 Views
  • 0 replies
  • 0 Likes

Resolved! Geolocation Region EU allowed bust Spain is denied

Hi we use the region as source adress in policies.We allowed region EU but traffic from Spain was blocked. We had to add ES (Spain) to the allowed regions.What am i missing? Spain should match the EU region. Any ideas? If i enter the ip that was blocked in CLI with the "show location ip" command it shows Spain.What does the EU region match? Do i...

kbe by L3 Networker
  • 8455 Views
  • 6 replies
  • 0 Likes

Global Protect Notification

Hi Folks, We are getting the below notification in the Global protect application. Is there any way to disable this notification. Is this message implies any error related to the connectivity issue of Global Protect portal. Error Message : “ You have xx seconds remaining to login and reconnect global protect”. Thanks in advance.

Resolved! How to Consolidate Multi vSys System into a Single vSys?

We have a multivsys system with extensive configuration in which we have been asked to consolidate into a single vsys. I have worked in Expedition, uploading two configuration and manually moving things over. I have tried load merging the configuation and only copying the vsys information into a single vsys. All met with varying level of success...

blwavg by L2 Linker
  • 8574 Views
  • 7 replies
  • 0 Likes

setting up a pa-500

hello i set the ip of the firewall from the console port with a new passwordnow i connect a network cable to de remote management port but the web page is not opening thanks

Kerm007 by L1 Bithead
  • 4138 Views
  • 7 replies
  • 0 Likes

Resolved! User ID Agent - 10.0.3-10

We have a user ID agent which the service is not restarting. Event viewer is not giving much information, see below. Re-install agent needed maybe?

clewis1_0-1654528571090.png
clewis1 by L3 Networker
  • 2898 Views
  • 3 replies
  • 0 Likes

Site login failing

I registered here to reply to a forum topic and post my own issue, and the only way I can login to this site is to reset my password. The user name I registered was all lower-case characters, but the profile link shows it in Proper Case with the first character and the character after the dash in upper case. I've tried logging in with both use...

z-anon by L0 Member
  • 2282 Views
  • 2 replies
  • 0 Likes

Resolved! Cloudgenix ION 2000 Controller port not getting IP

I bought a ION 2000 that was sold to me as new, the controller port is not getting an IP through the DHCP and the CLI won't take the default password that's in the documentation so I can't check the controller config. Could this be deffective?

AGavito by L0 Member
  • 7511 Views
  • 4 replies
  • 0 Likes

Traffic Monitor Filter Basics

PURPOSEThe purpose of this document is to demonstrate several methods of filtering and looking for specific types of traffic on the Palo Alto Firewalls. They are broken down into different areas such as host, zone, port, date/time, categories. At the end I have placed just a couple of examples of combining the various search filters together for...

gmchenry by L1 Bithead
  • 72406 Views
  • 13 replies
  • 8 Likes

Resolved! Total number of profiles (101) exceeds platform capacity (100)

Hello all, I have a PA-820 and I am experiencing the same issue described here:https://live.paloaltonetworks.com/t5/general-topics/total-number-of-profiles-xx-exceeds-platform-capacity-xx/td-p/243231 My current configuration includes the following: 208 security rules.35 nat Policy rules3 QOS Policy rules24 decryption Policy rules5 Application Ov...

mrjcap by L1 Bithead
  • 6298 Views
  • 2 replies
  • 0 Likes

Traffic Logging for Path Monitoring

I'm wondering if the Palo Alto firewall (PA3020) logs the ping traffic of a path monitoring setup, or if it can be configured to do so.Let me explain why.We have configured path monitoring on the default route through our primary ISP. During manual testing (unplug the ethernet cable) the failover to the secondary works just fine. However, we'v...

Resolved! Change device group tree

Hello,Now my Panorama managing 4 cluster, 3 in Emea and 1 in US.This the Device Group organization. Shared Cluster 1 Cluster 2 Cluster 3 Cluster 4 Now we want to modify the organization to split the Emea Cluster and US Cluster: SharedEmea:Cluster1cluster2cluster3US:Cluster1Should be easy like that:Create 2 new empty Device Gruop...

Resolved! Customer Support Account Without Device

Hello, We would like to transfer management of a customer's device from our support account, to theirs. However, they do not currently have a customer support account. All the documentation I have read online indicates that you must register a device in order to create a customer support account. As we currently manage the device, there is no de...

datapalne issue

I have 2 Paloalto firewalls working as ha active-passive, yesterday we had HA test so try to pass the traffic to the passive device buy suspend the active, the passive become active everything works fine till now my issue is the interface of the firewall 2 is not responding to anything ping or anything my network is down in Cisco switches showin...

  • 24336 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels