General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

application any not actually "any"

 

I have a simple virtual wire installation here, just testing policies.  I have a policy that is:

source: inside
destination: outside
application: any
service: application default

 

I attempted to connect to gmail through Outlook with IMAP and was being bl

...

2021-06-29 11_24_11-fw1.png
GMTPaul by L1 Bithead
  • 3406 Views
  • 7 replies
  • 0 Likes

Bandwidth limiting - QoS - multiple networks

Good afternoon, please support, I need to configure and limit the bandwidth of the Internet output of a pair of networks coming from a LAN Trust interface.

 

-Interface 1/1 is the outgoing WAN interface to the Internet.

-The segments 10.79.25.0/24 and 1

...

Metgatz by L4 Transporter
  • 2231 Views
  • 3 replies
  • 0 Likes

DH - VPN

 

Hi ,

 

How can I allow multiple Diffie-Hellman (DH) group in IKE  & IPSec profile while creating a VPN 

 

hanuman by L0 Member
  • 2119 Views
  • 4 replies
  • 0 Likes

"export to CSV" - limit

What is the maximum limit on the number of lines to return? can it be increased?

want to know what they do during siesta? see for yourself on the spanish porno tube https://pornogratisaqu.com/

 

 

 

 

 

ducuxawi by L0 Member
  • 1414 Views
  • 1 replies
  • 0 Likes

Resolved! Can I use CA Root Certificate for Debrypting SSL Traffic?

Hello,

 

I want o start setting using Decryption Policy, to Decrypt & Intercept SSL (443) traffic from users when connecting to Internet.

 

I am wondering, can I use one of the well known Certificate Trusted, e.g., Global Sign by installing it on the Pal

...

mshamsan by L1 Bithead
  • 3327 Views
  • 4 replies
  • 0 Likes

Resolved! Ineffective IP spoofing protection

I have IP spoofing protection enabled on PaloAlto but it is not effective due to the following reason:

 

My external Interface IP is 1.2.3.1/24 . The spoofed attacks are coming from a fictitious source IP for e.g. 1.2.3.25 destined to 1.2.3.50(web serv

...

Resolved! Traffic Thourhg the intended Security Rule

Hello,

 

I have configured a new Security Rule on top (#9 in the picture down) to Block traffic intended to a Custom URL configured in the profile  Block_Files

* TOP RULE *

  • Source Zone:                     any
  • Source Address:              any
  • Destination Z
...

mshamsan by L1 Bithead
  • 2640 Views
  • 3 replies
  • 0 Likes

HA Active/Passive with Preemption

2 firewalls configured with HA active/passive, And enabled preempt on both of firewalls

Everythings find, can synchronize configuration and session

 

firewall-A is active-firewall with priority 100

firewall-B is passive-firewall with priority 120

HA timer

...

  • 24199 Posts
  • 100 Subscriptions
Top Liked Authors
Labels