This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4221 Views
  • 0 replies
  • 0 Likes

Resolved! Can't advertise static route over ebgp

Hi all, i'm not having much joy getting this working.I have created a static route for a subnet which I am trying to advertise to an eBGP peer.I then created a redistribution profile with only static enabledI then added that profile under bgp Redist Rules.The BGP peering is definitely established and I am able to redistribute a Connected route n...

Mushussu by • L0 Member
  • 7584 Views
  • 3 replies
  • 0 Likes

Resolved! Static Route Question

I just have a question about static routing on the palo alto and how it deals with traffic. We one VR and a default network route to send traffic for 10.20.0.0/16 out via ethernet 1/5 , zone core. There is another interface 1/6 configured with 10.20.50.1/24 zone lab. On the lan by default all traffic get sent to the firewall. Outbound traffi...

MistryJa by • L1 Bithead
  • 2946 Views
  • 3 replies
  • 0 Likes

compatibility

Dear Gents.Kindly, i have a Cisco catalyst 9500 switch, my question, what is the last product of Palo alto firewall compatible with my cisco 9500 switch? thanks.

SDWAN - DIA anypath -Scenario?

Im still trying to get a grasp of the concept of SDWAN - DIA anypath. The components and configuration are pretty straight forward but the "why/when" is not making sense. The main scenario that's proposed is "when you want to fail over to using the internet at another site (over the vpn) when local DIA is not available." Again, I must be miss...

smarcyes by • L1 Bithead
  • 5347 Views
  • 6 replies
  • 0 Likes

In Progress: Device Updates / Content Publishing

Incident Report for Content Publishing is Failing: Palo Alto Networks Cloud Services — If you are unable to retrieve new updates for devices, please stay up-to-date on the issue and its resolution via the status page.

jforsythe by • Community Team Member
  • 2500 Views
  • 1 replies
  • 1 Likes

using Snmp3 to backup PA

Solarwinds Network Config Manager has the ability to use SNMP3 to backup PA config. See below link.https://thwack.solarwinds.com/product-forums/network-configuration-manager-ncm/i/feature-requests/backup-palo-alto-configuration-with-solarwinds-ncm-config-backups But the article doesn't include the SNMP3 string to do the backup. Anybody got a SN...

"end" but no "start" log while session breakdown. logging set to start and end of session

Hello, we have the following issue: Customer complains, that their web services, that are reachable from the internet through a palo alto firewall, show sporadic breakdown of incoming ssl connections for a couple of minutes. After analyzing the logs on the palo alto, I see in the corresponding time frame log entries with type session "end", but ...

Resolved! Dynamic IP and Port - Session Browser s2c

Hi All, Firstly many thanks for checking out my query. I have a virtual router that has an ISP connection. This ISP has assigned us a /30. I have configured an interface on the FW with the designated add from the /30, this address is used to NAT our clients to access the Internet using dynamic ip-and-port (nat overload). The internal client ...

DForde by • L1 Bithead
  • 2240 Views
  • 1 replies
  • 0 Likes

MFA no longer active/available at all

Hello,i read the info from april 14th, that mfa is mandatory in the future.Before, i had mfa enabled with the authenticator app, which worked fine.Since the information, no mfa at all is active/available on the account.

Access to PA-200 Web GUI is Denied.

When I open up a https://if_of_pa-200I get access denied message with You dont have authorization to view this page.I have logged into this firewall many times before but have not for several months now.I can use putty to get into the console. I found some online solution that would give this error is I was out of space.My root partition was at...

Omni918 by • L1 Bithead
  • 7434 Views
  • 10 replies
  • 0 Likes

Resolved! VPN proxy ID limitation Error

Is this still an issue and or what models pertain to this? I see the Pan os version is old on this article, but does anyone know if the limit here still applies? If it's been increased, what has it been increased to per model? Appears that aritcle/documentation is harder to find. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?i...

Sec101 by • L4 Transporter
  • 3396 Views
  • 1 replies
  • 0 Likes

Daul ISP and specific ISP routing

Good Afternoon All I have read the various methods for Dual ISP configuration and they make sense. I could not find one last detail and I was hoping someone here could help. Desired Configuration: ISP 1 = Active for outbound traffic during normal operations.ISP 2 = Inactive1 Client IP on the internet network to have its traffic routed out via IS...

Mort2k by • L0 Member
  • 2306 Views
  • 1 replies
  • 0 Likes

Resolved! Passing a Circuit Prefix Through Palo Firewall

I'll do my best to put this question into words.My company owns a /24 Public IP range. I have an engineering department that needs a /29 IP space off of that block for their Lab Environment. I have a Juniper MX104 Router and a Palo 5220 Firewall.I'm not sure what my best steps are to get this circuit passed through the Firewall straight to the L...

  • 24355 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks