This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Global protect enforcer and public wifi captive portal

Dear community, We have deployed Prisma access Global protect [agent 5.2.9], enabling network enforcer and captive portal detection [ 10 min timer and captive portal message].We are experiencing mixed results with users getting an error web page when joining the public wifi.We are able to get more consistent results when network enforcer is disa...

Allowing PIA VPN in home network

Hi all,Quite new to managing NGFW, please be patient.I have PA-820 looking after my home network, no domain, few computers, using it to learn more than anything else, but since I have it want to use it fully.I want my Private Internet Access VPN to access Internet without decryption, I am failing to make that exception.Protocol I want to use is ...

R.Tryba by • L1 Bithead
  • 4742 Views
  • 2 replies
  • 0 Likes

Palo Alto Firewall VM

I have installed a Palo Alto Firewall VM trial version. Now whenever I have tired to login / after successful login it is suddenly going to runlevel 0 and shutting down.

PAN-PA-5220 Purchase

Dear All, I am planning to purchase PA firewall 5220 for our Datacentre. and came across below modelI am not mistaken then I need to purchase PAN-PA-5220-DC i(f DC power supply) and PAN-PA-5220-AC ( If AC power supply) However I am clueless for what purpose I need to purchase below modesl? PAN-PA-5220-DC-OSSPAN-PA-5220-AC-OSSPalo Alto Networks P...

IPSec Tunnel fails after 1 packet

Hi Guys, We have a number of Palo Alto firewalls at our satellite sites configured in a Mesh VPN. Site A, Site B, and Site C (Internal) all work successfully.Site C DMZ can establish a tunnel to all the other sites, however as soon as the VPN is used, it immediately stops working. Site C Internal and Site C DMZ are different Virtual Routers runn...

Basic Setup.png

Log Forwarding - multiple instances of same catgory?

In Log Forwarding Profile I have URL Filtering/All Logs going to a log collection server. But for URLs of a phishing category I want those to be emailed. I tried to do this by creating a second profile match list profile URL Filtering/phishing. But it doesn't seem to be working. Any advice on how to have some go to email while most go to log se...

Admin credentials were not changing

HiWe have 2 PA-850They are working in HA modeWhen i got the handover they gave the admin credentialsThe secondary was always activeWhen i tried to login to the passive one the admin password did't workAt the end i logged in with the initial password created on first deployment 2 years agoAnd it was not changing from Web or CLIThe issue fixed aft...

Ask Your Questions Now! Cyber Elite Ask Me Anything (AMA) Event

Ask your questions now through June 30 as the LIVEcommunity Cyber Elite Experts will be available in a Q&A session for an opportunity to learn, join in, ask questions, and meet our experts! The Ask Me Anything (AMA) Event will be an opportunity to ask our Cyber Elite Experts questions about a range of technologies, solutions, and how they ca...

jennaqualls by • Community Team Member
  • 2333 Views
  • 1 replies
  • 0 Likes

Questions) Missing Panorama Log

When creating the Security Policy Rule, 'Log at Session Start/End' was all selected as Actions. After this, when I check the log in Panorama, only the End Log is visible and the Start Log is not visible.Also, sometimes this logs are not visible. In Panorama, there are cases where the log cannot be seen or some logs (Session Start) are not vis...

Policy Actions.png
future by • L0 Member
  • 4260 Views
  • 3 replies
  • 0 Likes

SAML Jumpcloud HA Implementation

Hi, i follow the docs here LIVEcommunity - PAN-OS SAML SSO with JumpCloud and Mobile Push MFA - LIVEcommunity - 493684 (paloaltonetworks.com)it works well with one firewall. When it used to HA active Passive Environtment, it wont work on the passive, the config sync from the active, but the configuration from Jumpcloud only setup for 1 IP Only. ...

URL Filtering Wildard - ? in URL

I have inbound decryption set up for a server and we want to restrict what URLs users can get to. The website admin tells me that ALL links to the site will contain something similar to the following: https://my.web.server/xxx/yyy/zzz/TEXT_SOMETHING.LIKE_THIS.GBL When I go to the site and click on the test links, I notice that it adds a ? after...

RCurrie by • L0 Member
  • 3704 Views
  • 2 replies
  • 0 Likes

Session end reason=resources-unavailable, version 8.1.15.h3

In the traffic log we have found some entries with a session end reason=resources-unavailable, version 8.1.15.h3, however PAN-189468 is not affecting our version only affects version: 9.1.0-9.1.1310.0-10.0.1010.1.0-10.1.4 adm_(active)> debug dataplane pool statistics | match "Regex Results"[12] Regex Results (11640): 8187/8192 0x800000046790...

Alpalo by • L4 Transporter
  • 3580 Views
  • 1 replies
  • 0 Likes

Client certificate for syslog is failing

Im trying to setup a syslog forward from a loggcollector with tls, i get this error in the syslog log on the collector. Certificate subject does not match configured hostname; hostname='scrubbed', certificate='blah.blah.com'However the certificate has the correct hostname as a san name (aswell as blah.blah.com), however it has lots of san names...

hbalzac by • L3 Networker
  • 3984 Views
  • 1 replies
  • 0 Likes
  • 24460 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks