General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Vwire to the same switch

Hi All, Has anyone ever used a Vwire setup with the same switch? Basically we want to loop traffic back to the same switch to another L3 router. Here is the traffic flow.Core-switch-->Palo Vwire in --> Palo Vwire out--> Core-Switch-->L3 router Here are the configs on the Core-Switch I used and it does work, but wondering if anyone...

SFTP slow transfer showing incomplete data in logs.

Hello everyone. I am facing an issue when I transfer files via SFTP and SCP is slow when I introduce Palo alto in the path. Data path: Server > Core switch > Palo alto > Fortinet > Internet ( AWS )Server > Core switch > Fortinet > Internet ( AWS )Speed with Palo Alto : 70-150KB/sSpeed without Palo Alto : 600 - 700KB/sI have...

Asmita_2-1653547770785.png
Asmita_1-1653547712213.png
Asmita_0-1653547559504.png
Asmita by • L0 Member
  • 3764 Views
  • 1 replies
  • 0 Likes

Resolved! Aggregate Ethernet Interface with Subinterfaces

Hi there,I'd like to set up a PA-5060 with an aggregate Layer 3 ethernet interface with no address:Aggregate InterfaceName: ae1Type: Layer 3Address: (none)Virtual Router: (none)Tag: (none)Security Zone: (none)and then add subinterfaces to it, each of which have their own IP address ranges and VLAN tags:SubinterfaceName: ae1.100Type: Layer 3Addre...

Not able to see all option in CLI on palo alto firewall

Hi Guys, I got this issue that im not able to see the CLI options after i press "tab" As you can see from the photos. Im able to see more options on the working fw than the non working fw. Both are using the same access account. Is it because the fw do not that the options thats why it didnt appear under the option? Model: PA5220Version: 9.1.13-...

Non Working.PNG
working.PNG
ongkai by • L1 Bithead
  • 2312 Views
  • 1 replies
  • 0 Likes

Resolved! Manually run report schedule

Hello, We have created a Report Schedule for a Report Group and set it to be emailed. Is there a way to manually (either via CLI/Webgui) run the report and email it to check and make sure it works without waiting for the Scheduled Day? Thanks in advance.

Farzana by • L4 Transporter
  • 7567 Views
  • 4 replies
  • 0 Likes

Resolved! Change the name for vsys1

Does anyone know if there is a way to change the name of vsys1? This would be mainly for the identifcation of the vsys in panorama.My testing says no, but figured I would check the community. *Reason: we want to change a single vsys deployment to a multi-vsys and would like to continue use of vsys1 but with the name change to identify the purpos...

Need help with Global Protect Internal Gateway

Hello everyone. I am hoping to have some guidance/help on figuring out what I am missing with our internal gateway. Prior to my employment there was an external gateway setup and is working. I have been tasked to create an internal gateway for this same external vpn. I used this video as a guide to setup the internal GW portion of the vpn. ...

Telnet in PAN os

Hi Team, I want to check the connectivity of particular port from one firewall interface. Like lets say i want to test connectivity to 8.8.8.8 over 443 from one of the interface. I'm aware Telnet doesn't work in PAN os. I want to know it there is any alternative to this. RegardsNarayana Srikar BondaGSOC Team

BNSRIKAR by • L1 Bithead
  • 2944 Views
  • 2 replies
  • 0 Likes

Virtual Wire transition default config ( Tag Allowed ) to layer 2 subinterfaces - Virtual Wire

Virtual Wire transition default config ( Tag Allowed ) to layer 2 subinterfaces - Virtual Wire Good afternoon, first of all thanks for the support, help and collaboration. Currently there is a scenario where there are two Virtual Wire interfaces, which to filter only the VLAN-TAG, there is the Tag Allowed option where there are the following VLA...

Metgatz by • L4 Transporter
  • 2514 Views
  • 1 replies
  • 0 Likes

MFA - LDAP ( Active Directory ) Radius/Tacacs+ Internal Resource Access

MFA - LDAP ( Active Directory ) Radius/Tacacs+ Internal Resource AccessHello good afternoon, thank you very much for the constant cooperation, for the excellent will and for the help and support.Dear all, what is the best strategy for a simple way to use a MFA for access to certain resources of the internal network. Example what you are looking ...

Metgatz by • L4 Transporter
  • 3013 Views
  • 1 replies
  • 0 Likes

Error when commit

Hello, I get this error message when I try to commit after making a change. Change is just a different IP for syslog server. ANy idea why?

palo error.png
  • 24479 Posts
  • 125 Subscriptions
Top Solution Authors
Labels