This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! FQDN not working vs Resolved IP address

I created a new FQDN address object to facilitate a new Policy(rule). When tested the FQDN resolves internal to the Palo Alto Firewall.The rule contains one destination address which is the new company.fqdn.com FQDNThe rule contains one source addressApplication SSL with Application-Default ServiceAction Allow When attempts are made to connect ...

rockfort by • L1 Bithead
  • 32792 Views
  • 6 replies
  • 0 Likes

PALO ALTO to AWS site to site VPN not established

Issue:PALO ALTO to AWS IPsec site to site VPN not able to established.SituationSince AWS will provide two VPN tunnel by default.One of the VPN tunnel is established using the same public IP of PALO ALTO while the other VPN tunnel not able to established. Here is the logs2022-05-24 12:55:40.905 +0800 [PNTF]: { 39: }: ====> PHASE-1 NEGOTIATION ...

Question for SaaS Security API and Inline

Hello, I am SE from Korea. Is there have one admin console for SaaS secure API and inline? I have both configured, but the console is different.(attached picture) However, Palo Alto Korea said, 'console has been integrated in one'. how can I configure?

CVEs that cannot be found in Palo Alto Advisories

Hi there, Does anyone know what does it mean generally for CVEs that cannot be found on Palo Alto Advisories?Does it mean Palo Alto is not affected or the advisories has yet to update? A few examples that cannot be found would be the following : CVE-2022-26377CVE-2022-28330CVE-2022-28614CVE-2022-28615CVE-2022-29404CVE-2022-31813CVE-2022-30556CVE...

L2 Extensions

Hello People , We have a situation where in a Site to Site IPSEC exists between Cisco ASA and PALO ALTO FW The LAN segment of the Network is behind Cisco ASA . Infact all of the VLANS are in this LAN Segment which is Behind Cisco ASA . The requirement is that Gateway for these VLANS will be the PALO ALTO FW So i need to know if it is possible...

Resolved! Your connection is not private (Privacy error)

i am going to access PA firewall on the browser or Global protect its shows Your connection is not private (Privacy error) then I m clicking on proceed to unsafe then it's showing the main page. how to resolve this. security certificate does not specifyProceed to (unsafe)

Resolved! Skype screensharing uses "u-meeting" app-id

Hi Guys, is it normal that Skype uses this u-meeting app-id every time user uses the screen sharing feature?I tried to block this app-id and the screen sharing stops working. Because I only allow app-ids listed on this article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRbCAK

RVizcarra by • L4 Transporter
  • 3991 Views
  • 3 replies
  • 0 Likes

PBF with ECMP Issue

Hello, i have question about PBF Using ECMP.We have 3 ISP and using ECMP Setting with weight round robin and Symetric Return SettingsISP A > 200ISP B > 100ISP C > 50 NAT we set like thisAll User > ISP A Using PBF for some IP SegmentSegment A to ISP ASegment B to ISP BSegment C to ISP C But we have some problem link below : When we c...

Resolved! Unable to block ".iso" & ".txt" file download with File Blocking Profile

Hi Everyone, I am unable to block the ".iso" & ".txt" file download with File Blocking Profile, I am able to block the rest of the files format.same issue with HTTP and HTTPS traffic. I have enabled decryption for HTTPS traffic but still the same issue. Even it's not blocking for HTTP traffic. Below are the link from where I am trying to dow...

No transmit/drop in capture

What are the reasons we don't see transmit or drop in capture and traffic log shows traffic is allowed to/from correct zones, and tcp as age-out in logs. Packets only show in receive/firewall stage. Alos checking flow basic, I do not see the packet at forwarding stage, although another firewall with same routes/policies and just different IP's w...

raji_toor by • L4 Transporter
  • 7607 Views
  • 4 replies
  • 0 Likes

Resolved! My Website has been tagged as Phishing-- Help!

After several hours, I have been unable to find a way to inquire about our small company's website being tagged as Phishing. This is going to cost me a large contract with a city municipality. Do I have to buy Palo Alto services to get it removed? Susan

Application and services in security policy rules

Hi I have a question, Following rule, Application allowed- DNS,SSL,WEB-Browsing Service allowed - TCP port 22 I understand DNS, SSL and Web-browsing would be allowed on port 22, but my question is SSH traffic would be allowed by this rule as I am allowing port-22 via service.? Also My second question, would DNS traffic be allowed on its sta...

jatinsingh06_1-1654734297058.png

Resolved! High dataplane CPU

Last few days we have been experiencing high dp-cpu on all NPC simultaneously, specifically with flow_ctrl. The flow_ctrl process typically shows 3-10% CPU, but all of a sudden all NPC "DP slot x, dp 0 and 1" simultaneously jump to 30..50...80...100% and maintain that for 30-60 minutes, during which the firewall is basically down. Overall load i...

  • 24482 Posts
  • 126 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks