General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4228 Views
  • 0 replies
  • 0 Likes

Resolved! VPN Site to site IPSec Tunnel not working

Hello,I've configured a VPN Tunnel from a PA220 to a PA200. They are able to ping each other but I don't see any ESP Packets in Wireshark. What should I do to get the packets to be encapsulated?Many thanks in advanced.

smshafek by L1 Bithead
  • 5785 Views
  • 4 replies
  • 0 Likes

How we can monitor/detect that particular FW stopped sending traffic logs to LogCOllector

Hi Community I'm looking for the possibility to be notified (trap/snmp/Panorama event) in the situation that a particular FW which is assigned to LogCollector for some reason stopped sending traffic to it. Let's assume that if there is a 1h gap I want to be notified.For some reason, I'm not considering implementing Syslog here. When such a situa...

Screenshot_1862.png
S_Owoc by L1 Bithead
  • 3941 Views
  • 4 replies
  • 0 Likes

VPN Drops after 1 minute with the error ike-nego-p2-proxy-id-bad

Hi, I am new to the palo and have run into this problem that I can't figure out. We have a VPN between the Palo and a Meraki. It's usually on permantly but recently it has been having drop outs, sometimes for days. I have realised that if I disable the tunnel and re-enable it, it comes back on but only for a maximum of 1 minute and then I get th...

Palo Alto Routing course

Howdy everyone, I have taught the foundations course...that was pre-covid. Now I am tasked with teaching routing. Which Palo-Alto class would the community recommend from your experiences that I teach? Thanks, JB

DIP NAT on inter vsys traffic

Hello, I have a FW that has many nat rules. And I found a bug, pan-130550:(PA-3200 Series, PA-5220, PA-5250, PA-5260, and PA-7000 Series firewalls) For traffic between virtual systems (inter-vsys traffic), the firewall cannot perform source NAT using dynamic IP (DIP) address translation.Workaround: Use source NAT with Dynamic IP and Port (DIPP)...

yhlee1 by L2 Linker
  • 3174 Views
  • 2 replies
  • 0 Likes

Critical System Log Msg

Hi All, Have you guys seen the below critical msg in the system log? Backtrace execution for the restarted process stopped due to an error accessing memory. Possible memory corruption? P.S: this is the passive firewall when the active FW went down. Many Thanks,

Pras by L4 Transporter
  • 3058 Views
  • 3 replies
  • 0 Likes

Resolved! Paloalto ms-kms application

Dear Team, The description of the ms-kms application is as follows. DescriptionMicrosoft Key Management Service (KMS) activates computers on a local network, eliminating the need for individual computers to connect to Microsoft. To do this, KMS uses a client-server topology. KMS client computers can locate KMS host computers by using Domain Name...

ConnectWise Control connection getting reset

Latest spyware signatures appear to be blocking legitimate connections to ConnectWise control. The 5/2 AppThreat-8564-7375 update categorizes the connection/file (GetSessionDetails) as threat Generic PHP Webshell File Detection.Produces "unknown error" on the ConnectWise portal page.The only way I can get around it is to exclude the connectwise ...

WAN Interface IP change - after Wildix phones still work, Yealink phones don't!

Hi all, looking for advice following what is in my opinion very unusual behavior. Where I work for, we have a PA220 running Firmware version 9.0.3 that is used as the firewall for VoIP traffic for physical desk phones. We have two brands of IP based desk phones; Yealink and Wildix. Both types/brands connect to our cloud hosted Wildix PB...

eveares by L1 Bithead
  • 4974 Views
  • 3 replies
  • 0 Likes

DLP product that will integrate with PA decryption broker?

All the DLP products I have researched require ICAP capability which the PA doesn't support. Does anyone know of a DLP product (network appliance or VM not client based) that will actually work with the decryption broker solution? Please don't suggest the Palo Alto DLP as it was not adequate in our testing.

Resolved! RDP through GP tunnel with a different user.

Hi All, I have a client that has recently run into an issue, after upgrading to PAN OS 10.1.2. When they connect to Global Protect with their username and then try to RDP through the GP tunnel to a server on site using a different user account that is not in the allowed GP user AD group, the GP tunnel looks to freeze (doesn't disconnect) and all...

Ben-Price by L4 Transporter
  • 9532 Views
  • 11 replies
  • 0 Likes
  • 24355 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels