This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Unable to block ".iso" & ".txt" file download with File Blocking Profile

Hi Everyone, I am unable to block the ".iso" & ".txt" file download with File Blocking Profile, I am able to block the rest of the files format.same issue with HTTP and HTTPS traffic. I have enabled decryption for HTTPS traffic but still the same issue. Even it's not blocking for HTTP traffic. Below are the link from where I am trying to dow...

No transmit/drop in capture

What are the reasons we don't see transmit or drop in capture and traffic log shows traffic is allowed to/from correct zones, and tcp as age-out in logs. Packets only show in receive/firewall stage. Alos checking flow basic, I do not see the packet at forwarding stage, although another firewall with same routes/policies and just different IP's w...

raji_toor by • L4 Transporter
  • 7390 Views
  • 4 replies
  • 0 Likes

Resolved! My Website has been tagged as Phishing-- Help!

After several hours, I have been unable to find a way to inquire about our small company's website being tagged as Phishing. This is going to cost me a large contract with a city municipality. Do I have to buy Palo Alto services to get it removed? Susan

Application and services in security policy rules

Hi I have a question, Following rule, Application allowed- DNS,SSL,WEB-Browsing Service allowed - TCP port 22 I understand DNS, SSL and Web-browsing would be allowed on port 22, but my question is SSH traffic would be allowed by this rule as I am allowing port-22 via service.? Also My second question, would DNS traffic be allowed on its sta...

jatinsingh06_1-1654734297058.png

Resolved! High dataplane CPU

Last few days we have been experiencing high dp-cpu on all NPC simultaneously, specifically with flow_ctrl. The flow_ctrl process typically shows 3-10% CPU, but all of a sudden all NPC "DP slot x, dp 0 and 1" simultaneously jump to 30..50...80...100% and maintain that for 30-60 minutes, during which the firewall is basically down. Overall load i...

Panorama-shared objects

I am just setting up a panorama with 25 managed firewalls.How can I have shared objects that are only shared between few firewalls but not all? My perimneter firewalls have huge number of objects which I would not like sharing with other remote firewalls but to some datacenter firewalls. how can I achieve this? Thanks.

Resolved! SSL Cert replacement PA-VM

I need to replace an SSL certificate for 443 device access, but it isn't in the certificate list.Whereabouts in the GUI do I find it? Thanks.

Split Tunnel with Global Protect and cannot get to internet

Hello,I have setup GP VPN and all works well. I can connect and everything works as needed.The problem is when I check off No Direct Access to local Network the internet is not available and I can still access my local network?We are using a PA-3200 with software version of 10.1.5-h1 with FP Agent 5.2.9.I have searched and tried different things...

thoffman by • L2 Linker
  • 3039 Views
  • 3 replies
  • 0 Likes

Paloalto Support Potral issue

Hi,I am facing an issue with when login support portal.I have configured 2FA Methods to use Email, but it seems too slow to receive email.The occurs page expired after I fill in the code.I would like to change 2FA Methods to google auth,Is there anyone who can help with this?

how does Support Portal 2FA cancel?

Get email authentication when logging in to the support site But I don't get an authentication mail. Is the account locked because of too many attempts?Does anyone know how to change or cancel 2FA settings?

qmso475 by • L3 Networker
  • 2852 Views
  • 2 replies
  • 0 Likes

Resolved! Windows Server PAN terminal server agent random port

On Windows Server 2016, with the "PAN terminal server agent" service we have exactly the problem described here:https://docs.microsoft.com/en-us/answers/questions/154579/listening-port-is-being-replaced-automatically-by.html Simply if the service is started it has this behavior, any port reserving test has not worked. Does anyone know of a solut...

DUAL ISP and PFB with single or multiple Virtual Routers

Hello Palo Alto Community! I am reaching out because I am stuck and a bit confused about what I've seen online when it comes to configuring dual ISP and PFB (which that part I understand) but when configuring the Virtual Routers section. Some only create a single VR with both ISP and their next hops and others create their ISP each VRs and then ...

FreddyC by • L1 Bithead
  • 6224 Views
  • 1 replies
  • 0 Likes

Resolved! Geolocation Region EU allowed bust Spain is denied

Hi we use the region as source adress in policies.We allowed region EU but traffic from Spain was blocked. We had to add ES (Spain) to the allowed regions.What am i missing? Spain should match the EU region. Any ideas? If i enter the ip that was blocked in CLI with the "show location ip" command it shows Spain.What does the EU region match? Do i...

kbe by • L3 Networker
  • 8922 Views
  • 6 replies
  • 0 Likes
  • 24415 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks