General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Palo Alto SDWAN zone

I am deploying Palo Alto SDWAN and the hub currently terminates dedicated L2 WAN circuits for each remote site. My plan is to build tunnels to each site across their dedicated L2 WAN and across the Internet. Example:

Palo Hub connects to site 1 on e1

...

help

PA2020 had factory reset

its show Unable to create directory /mnt/panrepo

and can't into maint

Can someone explain what the problem is?

Suspicious DNS Query (generic:omnatour.com)

Can anyone tell me if this is legitimate or if it's a false positive? My Cortex XDR hasn't found any behavioral issues to go along with it either.

40 g connectivity

Hi,

I have the below topology

PA has two 40 g ports and my core has 4 40g ports . server SW also has 40 g ports ( the switch is for connecting servers )
core required two 40g Ports for cross-connection.

So remaining two 40g connections,

Do I need to

...

LDAP Authentication not working when using include group settings

Hi Team,

We had configured LDAP authentication on Palo alto firewall.

The LDAP server had been configured and we had checked the connectivity and it was successful. Created an group mapping and included an group in the include group mapping.

Checked

...

Resolved! Transparenlty NATing IPsec traffic to other device

Hello,

We have an issue with forwarding an IPsec connection to a VPN device behind the PAN-OS FW.

So the setup is supposed to be the following:
* PAN-OS is using outside interface 192.168.1.1/24
* 192.168.1.2 is an address with DNAT to 10.10.10.1 on an

...

Resolved! Cannot reach server at DMZ via Nat

Hi

NAT is setup at PA for outside users to reach DMZ server based on protocol
The topology is like the below:

SW1(f1/1) -------- (e1/1,DMZ)PA(Outside,e1/5)--------(f1/5)SW2

Interface config:

e1/1 10.100.255.1/24
f1/1 10.100.255.2/24 as inside Server

e1/5 4

...

Agentless User-ID Not Connected (RESOLVED)

EDIT: I have resolved my issue... adding this in case someone runs into the same issue I did. Basically, I'm an idiot lol. Issue was because my AD servers are in a security zone and I needed to add a security policy that allowed the management IP add

...

Resolved! Firewall Events as Report

Hi All,

Is there a way where, I can generate report of firewall events, Like login events from system logs, As daily basis. And I will share through email.

NGFW

Migrate Panorama from VMware to AWS

Has anybody migrated Panorama from on prem to AWS? There are a few options that are available to us, and I am trying to decide which option is the best. Also, if you can list any "gotchas" during the migration that would benefit us, that would be rea

...

Resolved! IPSEC ON SECONDARY ADDRESSES

Hello,

just a little question it is possible to terminate a vpn-ipsec with a secondary adresses on external interface or I must use the main interface?

thks,

ALex

Resolved! SSL forward-proxy certificate import

I've gerenated a CSR to give my enterprise CA. Now, I've recieved the enterprise CA-signed certificate ann imported it onto the firewall.

The status reads "valid". The "Key" box is checked, however the "CA" box isn't.

Also, when I select the certifica

...

Geoblocking Missing

We are on 8.1.21 - When creating a geoblocking rule I do not have the option for 'Regions' in my rule drop down. Is this due to my version OR do i need to upload a geoblocking list [how?]

thanks!

IOS users are unable to connected with global protect

Hi,

Iam facing the issue with global protect is not connected with IOS users and getting this error after entering username and password.

)
P1839-T259 12/22/2021 17:19:18:962 Debug( 127): set session proxy to 1-0x104d4b5d0.
P1839-T259 12/22/2021 17:1

...

Panorama Threat Event forwarding to syslog only sending medium events

Has anyone else had an issue with the Threat Log -> Syslog forwarding? It seems we are only getting the medium detections forwarded despite many informational events seen in the Threat monitoring. I thought there was a filter somewhere but we have it

...

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free