This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! MFA on the Palo Support Portal?

I saw the announcement that they were going to start requiring MFA for logging in on the Palo Alto websites and it mentions a code via email, however, I was already set up to use an authenticator app for this. When I went to log in today, it seems to be ignoring my account settings and doing the email code every time. I tried switching to the ...

jsalmans by • L4 Transporter
  • 20432 Views
  • 13 replies
  • 0 Likes

Mapping problem of users (XMLAPI) authenticated in Clearpass

Hi team, The problem detected is that Palo Alto (PAN-OS 9.1.13-h3)computers register too many IPs for each user through XMLAPI (RADIUS-Clearpass origin). Usually a user is not connected to the WiFi network with more than 3 devices (work computer, personal phone and corporate phone), therefore is not associated with more than 3 IPs. In Palo Alto ...

Alpalo by • L4 Transporter
  • 3613 Views
  • 2 replies
  • 0 Likes

advanced URL & URL4 license HA configurable check

Dear Team, I understand that the same license set is required to configure HA according to the content below.- The same model- The same PAN-OS version- The same type of interfaces- The same set of licenses Customers want to configure HA while introducing new equipment. However, the existing equipment is using the URL4 license, and the equipment ...

Resolved! SSL Decryption bug in PAN-OS 9.1.14

I recently upgraded from panos 9.1.13-h3 to 9.1.14 then SSL decryption stopped working, in the traffic monitor there wasn't any decryption error but when i excluded a PC the internet workedand it seams other people are also having the same issue (Reddit ), but its not in the known issue list until nowso i had to revert to the previous version an...

LAS by • L2 Linker
  • 15422 Views
  • 22 replies
  • 0 Likes

Resolved! FQDN not working vs Resolved IP address

I created a new FQDN address object to facilitate a new Policy(rule). When tested the FQDN resolves internal to the Palo Alto Firewall.The rule contains one destination address which is the new company.fqdn.com FQDNThe rule contains one source addressApplication SSL with Application-Default ServiceAction Allow When attempts are made to connect ...

rockfort by • L1 Bithead
  • 32420 Views
  • 6 replies
  • 0 Likes

PALO ALTO to AWS site to site VPN not established

Issue:PALO ALTO to AWS IPsec site to site VPN not able to established.SituationSince AWS will provide two VPN tunnel by default.One of the VPN tunnel is established using the same public IP of PALO ALTO while the other VPN tunnel not able to established. Here is the logs2022-05-24 12:55:40.905 +0800 [PNTF]: { 39: }: ====> PHASE-1 NEGOTIATION ...

Question for SaaS Security API and Inline

Hello, I am SE from Korea. Is there have one admin console for SaaS secure API and inline? I have both configured, but the console is different.(attached picture) However, Palo Alto Korea said, 'console has been integrated in one'. how can I configure?

CVEs that cannot be found in Palo Alto Advisories

Hi there, Does anyone know what does it mean generally for CVEs that cannot be found on Palo Alto Advisories?Does it mean Palo Alto is not affected or the advisories has yet to update? A few examples that cannot be found would be the following : CVE-2022-26377CVE-2022-28330CVE-2022-28614CVE-2022-28615CVE-2022-29404CVE-2022-31813CVE-2022-30556CVE...

L2 Extensions

Hello People , We have a situation where in a Site to Site IPSEC exists between Cisco ASA and PALO ALTO FW The LAN segment of the Network is behind Cisco ASA . Infact all of the VLANS are in this LAN Segment which is Behind Cisco ASA . The requirement is that Gateway for these VLANS will be the PALO ALTO FW So i need to know if it is possible...

Resolved! Your connection is not private (Privacy error)

i am going to access PA firewall on the browser or Global protect its shows Your connection is not private (Privacy error) then I m clicking on proceed to unsafe then it's showing the main page. how to resolve this. security certificate does not specifyProceed to (unsafe)

Resolved! Skype screensharing uses "u-meeting" app-id

Hi Guys, is it normal that Skype uses this u-meeting app-id every time user uses the screen sharing feature?I tried to block this app-id and the screen sharing stops working. Because I only allow app-ids listed on this article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRbCAK

RVizcarra by • L4 Transporter
  • 3880 Views
  • 3 replies
  • 0 Likes

PBF with ECMP Issue

Hello, i have question about PBF Using ECMP.We have 3 ISP and using ECMP Setting with weight round robin and Symetric Return SettingsISP A > 200ISP B > 100ISP C > 50 NAT we set like thisAll User > ISP A Using PBF for some IP SegmentSegment A to ISP ASegment B to ISP BSegment C to ISP C But we have some problem link below : When we c...

Resolved! Unable to block ".iso" & ".txt" file download with File Blocking Profile

Hi Everyone, I am unable to block the ".iso" & ".txt" file download with File Blocking Profile, I am able to block the rest of the files format.same issue with HTTP and HTTPS traffic. I have enabled decryption for HTTPS traffic but still the same issue. Even it's not blocking for HTTP traffic. Below are the link from where I am trying to dow...

No transmit/drop in capture

What are the reasons we don't see transmit or drop in capture and traffic log shows traffic is allowed to/from correct zones, and tcp as age-out in logs. Packets only show in receive/firewall stage. Alos checking flow basic, I do not see the packet at forwarding stage, although another firewall with same routes/policies and just different IP's w...

raji_toor by • L4 Transporter
  • 7453 Views
  • 4 replies
  • 0 Likes
  • 24442 Posts
  • 125 Subscriptions
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks