This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Port to Port latency stats

I am trying to find out what the typical port to port latency is of the 800 and 3200 devices. I appreciate that this probably changes depending on what inspections are running, and configuration, but I am after a ball park figure for standard L2/L3 interfaces with a simple rule set, and how much extra IPSec adds.

Rich.H by • L2 Linker
  • 2390 Views
  • 1 replies
  • 0 Likes

Resolved! Mobile Hotspot - Can I force SSL?

I'm working using a mobile hotspot (T-Mobile 5G), but I have chronic failures until it finally falls back to SSL. Then I run fine for many hours until I need to reconnect. Question: Can I force it connect in SSL? I'd be happy to help improve the product by diagnosing the issues, if anybody wants to reach out to me. My IT department j...

Security Report

I would like to create and export a security report giving me a simple count on the number of times an attack was attempted.The definition of an "attack" could range anywhere from a network discovery to a tentative of password brute-force, as many vectors as possible.I am using a PA-3020 on version 9.1.9 but the report won't be limited to this v...

Resolved! With GlobalProtect on Windows is it possible to exclude Chrome but include Firefox from routing through the VPN?

I have to use Global Protect on my home Windows machine purely for accessing certain work-related websites that aren't accessible without it. Ideally I'd like the rest of my browsing (e.g. Youtube) to not have to go through it. My idea for achieving this is to use Chrome (unproxied) for all my non-work browsing and Firefox for accessing work sit...

dee4006 by • L1 Bithead
  • 7007 Views
  • 5 replies
  • 0 Likes

How to apply security policy over more than 200k public IP? (EDL? API?,...)

Helo, we have started a plan for a new project. I have created a picture, so you can see, what I acutally mean :). User will via some customer portal setup a new broadband link. He will be able to choose if the broadband should be secured and by several levels - TP, URL, DNS, WF,...If he choose the security level and confirm it, the customer por...

pict.png
LukasB by • L2 Linker
  • 5027 Views
  • 7 replies
  • 0 Likes

Question about Global protect Pre-Logon Issue

Hi, I configured GP pre-logon method, But it’s only working in administrator mode even though the user is part of administrator group, it’ not working for normal users. I followed below KB article,https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEYCA0 In global protect client installed laptops, we are able to connect g...

GlobalProtect.jpeg

No ICMP hitting Palo Interface but ICMP is allowed

I have a greenfield Palo with a fresh ISP.Have confirmed from the Palo I can source from my interface and ping outbound to anywhere in the world.Interface mgmt has been set to allow ICMP, I've left the allowed IP's blank and also set my specific IP, neither allow ICMP traffic to the interface. The more frustrating thing is that nothing is hittin...

VPN IPSEC secondary peer

Hello,I have a vpn ipsec in production, now I have to add a secondary remote peer.It's my first time I have to configure a 2nd peer.If I understood well I can't simply add a seocndary peer to the VPN but I have to configure a new psec but the difference is the static route related the remote network.Example I should have:Remote net: 10.1.0.0/24R...

5450 - Included cards in base bundle

It seems odd that the base bundle (PAN-PA-5450-AC-SYS) includes a NC and not a DPC. Can someone from Palo, or someone that has received a 5450, confirm that a DPC is *not* included and the base bundle (it will not function on its own)?

PA not responding to any incoming requests

I have a PA-220 (PANOS 9.1.8) running with a dynamic PPoE link to the ISP. I've tried everything! It does not respond to PING, SSH, HTTPS. I removed the firewall security profiles, zone protection, added the management profile. Looking at the pcap, the external IP keeps sending and the PA will not respond to anything. I'm at a loss. I don't even...

DJ_Palo by • L1 Bithead
  • 3140 Views
  • 2 replies
  • 0 Likes

PAN-OS 10.1.4-h4

Hello all,We are looking to update PAN-OS to 10.1.4-h4 but wanted to ask if anyone had any issues after upgrading? I had 10.1.4 installed but it had bugs and had to roll back so I am a little bit leery to upgrade again.Thank you,Tom

thoffman by • L2 Linker
  • 2135 Views
  • 1 replies
  • 0 Likes

Global Protect 6.0 Client Windows Authentication

Since upgrading to the 6.0 client every hour, when the client does its config refresh interval, Windows defaults to the Global Protect password sign in option when unlocking the computers rather than what the users are normally using (PIN, Face, Finger etc). The same issue occurs when manually refreshing the connection or signing out and in to t...

Interface Status in Suspended state

I have my production firewalls in HA active/passive mode. My question is if I have suspended the passive firewall, what would be the interface status, would it be down or showing up ? I do understand it will not be forwarding traffic but what would you see in the GUI when checking the interface state.

bambox by • L1 Bithead
  • 4163 Views
  • 1 replies
  • 0 Likes
  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks