General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4111 Views
  • 0 replies
  • 0 Likes

Application incomplete

User reported that access not working, traffic is hitting to correct rule , action is allow but application is showing incomplete and session end reason is aged-out . sent packet is 1 and received 0Can anyone tell me what will be the resolution for this ?

p66976_1-1650271641517.png
p66976 by L0 Member
  • 16814 Views
  • 1 replies
  • 0 Likes

Expired Security policy behaviour

What is the behaviour if schedule is expired on security policy? Existing established session terminated and new session will not established? What is the solution if existing established session not terminated after expired security policy

GP Client Log in and GP Bootup

Dear Team, Please clarify the below points! 1. We are required to start the GP at boot time when the windows start ? 2. How to GP login and remember old password [windows machine Active Directory client.] ? RegardsKarthikeyan Balamurugan

Connecting PA 220 home user

Hello, I bought a PA220 and have got the Mgt cable into my home broadband and have connected and got it registered. The IP address i gave the Palo is on the same 192.168.0.0 network as my home broadband scope. How do i get the traffic going through this firewall thanksKevin

Recently purchased 2nd hand PA-3050

Hi All, I recently bought a PA-3050 from my local auction house. Unfortunately I was not provided with an IP address of the MGMT interface so I am unable to connect to the device. I have gone through some of the usual default IP's however none of them appear to work. I have connected a serial to USB cable in and gone through each baud and no...

Adding Multi-Vsys firewalls into Panorama | issues, steps, and guides

Hi LIVEcommunity, I hope this article finds you healthy and well. A few months back I ran into a few road-blocks and "gotchas" when trying to add an existing multi-vsys firewall into Panorama and manage the firewall with a proper Template stack. There aren't any documents about this process, so I thought I would share my experience - I hope this...

JD-SECD by L1 Bithead
  • 5321 Views
  • 2 replies
  • 2 Likes

User-ID Agent - [Error 115]: Cannot open security log for DC..

These errors just don't make sense to me, I have followed everything as required. I am currently doing this in my lab and I'm stuck with this error about permissions, I have given permisions for event log readers, server operators and distributed com users. Any ideas on what's missing? I have installed the agent on win7 and the AD is on win srv ...

HA running configuration not sync

Hi Team We are facing the issue with HA running config not synchronized >> We have restarted the both active and passive firewall management server and push the configuration by execute the cli command 'request high-availability sync-to-remote running-config' but its showing as " Failed to synchronize running configuration with HA peer"....

Resolved! Endpoint protection IOT Question

What exactly is the purpose on the "endpoint protection" section listed under the inventory list in Palo Alto IOT cloud integrations? Is that just a section that shows you what devices are covered and which aren't? Or is this a section that actually suggests what type of endpoint protection to use on the given IOT device?

Sec101 by L4 Transporter
  • 3138 Views
  • 3 replies
  • 0 Likes

Intermittent sites not loading

Having issues with palo alto pa-820. Some times when users try to load sites they just don't load. Wait some time and site usually loads. Some times it is fine, loads fast, users not getting any errors. No changes made to cause issue. Thinking it is something with dynamic updates? This started on the morning of 12-04-2022.

IT_Fleet by L1 Bithead
  • 4672 Views
  • 7 replies
  • 0 Likes

HA Cluster Topologies and experiences

Has anyone had some hands on experiences with the new clustering features? I've read a bit on them, but like the post below, am struggling to make sense of the actual functionality/workability of the finer details needed for this setup as to how it exactly functions for multi data center scalability. Curious as to how the addressing scheme wo...

Sec101 by L4 Transporter
  • 5402 Views
  • 5 replies
  • 0 Likes

Default security rules, hit count and Apps Seen

Hi, I'm noticing a weird behaviour with default security rules "intrazone-default" and "interzone-default": For "intrazone-default" I can see how many apps have been seen by the rule, but if I click on the "Apps Seen" link nothing happens;For both "intrazone-default" and "interzone-default", if the firewall is connected to Panorama, I can't see ...

emyl_79 by L2 Linker
  • 3318 Views
  • 1 replies
  • 0 Likes
  • 24332 Posts
  • 124 Subscriptions
Top Solution Authors
Labels