General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Questions) Missing Panorama Log

When creating the Security Policy Rule, 'Log at Session Start/End' was all selected as Actions. After this, when I check the log in Panorama, only the End Log is visible and the Start Log is not visible.Also, sometimes this logs are not visible. In Panorama, there are cases where the log cannot be seen or some logs (Session Start) are not vis...

Policy Actions.png
future by • L0 Member
  • 4330 Views
  • 3 replies
  • 0 Likes

SAML Jumpcloud HA Implementation

Hi, i follow the docs here LIVEcommunity - PAN-OS SAML SSO with JumpCloud and Mobile Push MFA - LIVEcommunity - 493684 (paloaltonetworks.com)it works well with one firewall. When it used to HA active Passive Environtment, it wont work on the passive, the config sync from the active, but the configuration from Jumpcloud only setup for 1 IP Only. ...

URL Filtering Wildard - ? in URL

I have inbound decryption set up for a server and we want to restrict what URLs users can get to. The website admin tells me that ALL links to the site will contain something similar to the following: https://my.web.server/xxx/yyy/zzz/TEXT_SOMETHING.LIKE_THIS.GBL When I go to the site and click on the test links, I notice that it adds a ? after...

RCurrie by • L0 Member
  • 3756 Views
  • 2 replies
  • 0 Likes

Session end reason=resources-unavailable, version 8.1.15.h3

In the traffic log we have found some entries with a session end reason=resources-unavailable, version 8.1.15.h3, however PAN-189468 is not affecting our version only affects version: 9.1.0-9.1.1310.0-10.0.1010.1.0-10.1.4 adm_(active)> debug dataplane pool statistics | match "Regex Results"[12] Regex Results (11640): 8187/8192 0x800000046790...

Alpalo by • L4 Transporter
  • 3629 Views
  • 1 replies
  • 0 Likes

Client certificate for syslog is failing

Im trying to setup a syslog forward from a loggcollector with tls, i get this error in the syslog log on the collector. Certificate subject does not match configured hostname; hostname='scrubbed', certificate='blah.blah.com'However the certificate has the correct hostname as a san name (aswell as blah.blah.com), however it has lots of san names...

hbalzac by • L3 Networker
  • 4045 Views
  • 1 replies
  • 0 Likes

Technical Specs of M-200

Hi Guys,Anybody here what is the default RAM and CPU number of a M-200 Panorama server? I've checked the guides and data sheet but I can only see the VM version.Thanks in advance.

Nikko by • L1 Bithead
  • 6590 Views
  • 5 replies
  • 0 Likes

Palo Alto CloudGenix Support

This is terrible!! The second time, in the last week, I'm in need of urgent assistance (the whole office is down) and I'm unable to get anyone's phone quickly enough! First time I was waiting for 2 hrs. on the phone before finally, I got someone to help. When is this going to be addressed? Right now I'm in the same situation and need help qu...

Resolved! Interface states in PAN

Hi Team ,I have query regarding below . Physical interface is showing down but subinterface is showing up. ideally subinterface should also be showing down. ?

DeepakVerma_0-1656413018591.png

Resolved! Best practice for allow Internet IP

Dear All, Now I want to optimize security policy, I have many rule that allow any but now I want to change from "any" to "Internet IP". Does PaloAlto have internet ip object by default? or how I define internet ip in address? Thank you for your help.

Resolved! Custom created Anti-Spyware profiles not opening, showing “The server is not responding. Please wait and try your operation again later”.

Hello all Model: PA-3220 Firmware version: 10.1.16 I am not able to open some custom-created Anti-Spyware profiles after moving to 10.1.15-h2 from 10.0.X then upgraded to 10.1.16 (being a preferred version ). showing the below error. - default & Strict are there by predefined and are opening perfecty without any issue. Created a test po...

Zeeshan_Shaheen_1-1655878999153.png

NAT policy retaining original Address

Hi, We have a VM-series running 10.1, with a number of hosts with public IP addresses. The hosts are running a common service (i.e. HTTPS on 443), however they need to be accessible from external on an alternate port (i.e. HTTPS 8443). As such, we need to translate the port but not the address. Similar to our existing firewall (Checkpoint) I wou...

gprinsen by • L0 Member
  • 2210 Views
  • 1 replies
  • 0 Likes

anyone no vaild content package exists know?

Hi.This is a list of licenses currently set on paloalto. However, the above error is occurring.I manually raised the license and reset the policy, but the same symptoms appear.I'm using a free license version, is it related to this?

오류 메시지.PNG
적용.PNG
qmso475 by • L3 Networker
  • 3794 Views
  • 5 replies
  • 0 Likes
  • 24481 Posts
  • 125 Subscriptions
Top Solution Authors
Labels