General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1912 Views
  • 0 replies
  • 0 Likes

Resolved! How to view threats, blocked activity over time

I am trying to understand how to view threats, malicious IPs, etc over time. For instance in the ACC tab I understand one can view threats, threat source IPs etc. I am not seeing how to view trends, for example if we want to see if there has been an

...

ccfritz by L1 Bithead
  • 3428 Views
  • 1 replies
  • 0 Likes

GP users are getting denied random times

I have global protect v5.0.5 deployed to all Corporate Windows and some users reported that when they work everything stop to work and suddenly after 5-10 minutes is back again without disconnecting them from the global protect .This happen random ti

...

using NAT to "change subnets"

Hello community,

 

I have what I think is an odd use case for NAT but am curious if it would work.

We are readdressing our campus and have a series of vending devices with no way to change the static IPs. All of those devices need to "move" to another s

...

mnaylor by L1 Bithead
  • 6274 Views
  • 9 replies
  • 0 Likes

Changing the IP Address of Panorama

Hi Gang,

 

We need to change the management IP address of Panorama due to a complete change in our network. It runs in, Panorama mode, and manages several firewall pairs (which forward their logs to Panorama).

 

My questions is:

  1. Is it as easy as changing
...

Log Collector Status

Hello -

From local firewall Device > Management > Logging and Reporting Settings > Log Collector Status > Show Status it says that there is an error for Device Connectivity

 

All of my logging is working just fine though.  Is this just a bug?

From comman

...

DC.PNG

Scheduled Log Export based on custom queries

Is there any option to schedule custom traffic reports based on custom queries and to get it exported automatically .?

Currently, we are exporting the traffic logs manually from  Monitor > Logs >Traffic and pasting the queries ( some of the sample que

...

Resolved! 10.1.4 HA config sync problems with certificates

I don't know if this is a 10.1.4 bug or by design but I have a pair of PA460's in HA with config sync enabled.

 

1. Firewall won't sync a certificate with a private key to the other firewall.  It syncs the root CA only.

2. I can't sync any SSL/TLS servi

...

Global connection issues with Wildfire EU Cloud?

Somebody else has same issue with Wildfire EU Cloud?

System Log full of "wildfire-conn-failed" events and in traffic log can see corresponding connection issues with 154.59.126.51, packets received = 0, therefore application "incomplete". Normally it

...

Anon1 by L4 Transporter
  • 6742 Views
  • 9 replies
  • 0 Likes

UID Redistribution SSL Errors

Hoping someone else has run into this.  I have been implementing UID redistribution in our PAN environment.  I've stumbled across a few firewalls that will not establish a connection on port 5007, once the UID service is moved off of the default Mgmt

...

Resolved! Inconsistent policy action on the same traffic flow

Hello,

 

I do have a connection flow for Microsoft Teams direct routing domain sip-all.pstnhub.microsoft.com where I do have a NAT rule and a security rules for bidirectional traffic with the Microsoft domain from our DMZ. The issue is that the firewal

...

bambox by L1 Bithead
  • 3738 Views
  • 3 replies
  • 0 Likes

Inter-working of PBF and DHCP Relay

Hi All,

 

I have a query regarding DHCP Relay working with Policy based forwarding.

 

We have a setup where DHCP relay is configured on firewall and DHCP server is in remote location reached via IPsec tunnel. We have 2 IPsec tunnels configured (tunne

...

  • 24193 Posts
  • 117 Subscriptions
Top Liked Authors
Labels