General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4118 Views
  • 0 replies
  • 0 Likes

Where do you get additional threat feeds from

Hello All,Just curious as to what additional threat feeds you use to ingest into your PAN. Here are some of the ones we use:Threat intelligence blocklistshttps://talosintelligence.com/documents/ip-blacklisthttp://rules.emergingthreats.net/fwrules/emerging-Block-IPs.txthttp://panwdbl.appspot.com/http://www.spamhaus.org/drop/drop.txthttp://www.spa...

FQDN URLs that change IP addresses quickly

PA-3220 Active/Standby Pair10.0.8-h8 We have a URL we tried adding to a negate policy for inside to outside decryption. This resolves the ability to pull credit reports into our core financial system. However the problem is still intermittent. Its added as an FQDN object. Here's the thing, If I do an nslookup or go to digwebinterface.com and ...

ksauer507 by L3 Networker
  • 6979 Views
  • 5 replies
  • 0 Likes

Problem with Wildfire Registered Server busy or error

Hi team,We have detected loss of connectivity to wildfire, We have followed the following link but the problem persists https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMCYCA2Model PA-3220Version 9.0 Does anybody know what could be happening? Thanks so much

Alpalo_1-1644248096348.png
Alpalo by L4 Transporter
  • 2599 Views
  • 2 replies
  • 0 Likes

Firewall Failure

Hello guys, last week i have experienced something very weird.I have two PA-3220 in HA Active/Active. They were working properly and all of the sudden, the Active-Primary stopped working (all the interfaces went down except the management interface, all the led ports went also down except the Power led which was green. i was able to ping the man...

Multiple access domain/role to one user using Radius/ISE

Hi everyone,I have a scenario that i have two differents access domains and one user can access both, but one with read only permissions and another with write permissions.I cant create users manually and select AD / ROLE because the idea is that the control is centralized in RADIUS / ISE. In the example below, when i loggin in the Panorama i ca...

FernandoAraujo_0-1596370707473.png
FernandoAraujo_1-1596371038825.png

Resolved! Advanced URL Filtering - help me understand it please?

Hello all,I have the regular PAN-DB URL filtering and was considering the Advanced URL filtering. From what I understand after reading the documentation, if the PA URL DB recognizes a URL as risky, it sends it to the Advanced URL DB in cloud for real time analysis. Without the advanced URL feature, I'm open to a zero day attack because the URL d...

roma by L2 Linker
  • 3460 Views
  • 2 replies
  • 0 Likes

Any Issue on Customer Support Portal?

Hello.I currently cannot login CSP with Server Error, while I need to verify something urgently.Calls are on hold for a long time, never getting through. Does anyone have any information of system trouble or something in CSP?

YukaSato by L0 Member
  • 1953 Views
  • 1 replies
  • 0 Likes

Is it recommended to use Loopback interface as a source in path monitoring ?

Hi, I am trying to configure a path based monitoring for a static route on a virtual router X, now on the VR X, there is multiple interfaces, is it usually recommended to use one of the interfaces IP address as a source address for the monitoring rule when pinging google or better to create a loopback on that VR and use that instead. Thanks.

bambox by L1 Bithead
  • 2895 Views
  • 1 replies
  • 0 Likes

GlobalProtect + Mac

Hello. I have macos monteray 12.2.1 and GlobalProtect 5.2.6-87 All the traffic is not going in to the tunnel. Some still goes on the normal network outside of the VPN. Is there any setting in systems settings on the Mac that I have to allow for the software to route all the traffic?

2nd hand PA-820 licenses

I want to get a 2nd hand PA-820 from ebay to learn this from. (This is not for a business) Its my understanding that I would need a licenses to get this equipment to work correctly but I dont know to get it from and I have called the sales hotline but no one answers the phone. I am just looking to get the firewall portion to work. Any suggesti...

Region Blocking

Hello everyone. I want traffic only from my own region. I want to block all other regions. How to do this process in a simple and short way?

Fagani by L2 Linker
  • 4622 Views
  • 3 replies
  • 0 Likes
  • 24334 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels