This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

URL Category of Security Policy with destination "Any"

Dear All, I created a security policy as below. However, I find all traffic will go through this policy. Do you have any idea? Thanks Source: AnyDestination: AnyService: 443, 80 and specific portURL Category: Custom (*.s3.amazonaws.com) Peter

PChow4 by • L1 Bithead
  • 4433 Views
  • 4 replies
  • 0 Likes

LDAP authentication for CLI

I got LDAP authentication working so that when logging into the Web GUI the microsoft active directory accounts works with no problems. When a user logs into the CLI and tries using their LDAP account the system log shows invalid username/password. the username syntax is <title>.<firstname>.<lastname>.

snormoyle by • Not applicable
  • 7347 Views
  • 7 replies
  • 0 Likes

Resolved! url filtering

Hi i have raised a change request for url recategorization but not yet received update from palo alto. It has been 24hours

PaloAlto support account

Hello,I am trying to create the PaloAlto support account to be able to access the support portal, I provided all required informations however I get error and I should contact support, I tried to call the support using the local number in Germany no one is answering. How I am supposed to get your support ?

PA HA with Topology Design

Hello Community,I have two sites, I did an initial design, and I want to make sure that I won't find any problems in real installation*on site 1 (topology1) We found a problem that the distance between ISP installation and IT room more than 200m So we wanted to use a media converter copper to fiber , Is this correct or could it cause a problem ...

Resolved! SNMP to track NAT/PAT translation usage statistic

Hi, There's public IP configured with NAT port address translation for outbound Internet access. Can we monitor the statistics/utilization of NAT/PAT to prevent port exhaustion, is yes is there a reference guide what's the OID value or which modules / subtree to refer in mibs file, or via API calls? Thank you

Resolved! Commit fails in 10.0.7

Error-Failed to add 'o15.officeredir.microsoft.com/' to external-URL-list" and Commit fails after that in 10.0.7. we got to know that there is bug ID PAN-172580 declared in 10.0.7 and error will be fixed in Target version 10.0.8(ETA by Mid Nov) I tried to find PAN-172580 in 10.0.7 Known issues but not seeing. Can you please look into it

LDAPS Falling back to LDAP

Our firewalls are configured for LDAPS on port 636 to our Windows DC. We have the require SSL/TLS option checked in the LDAP settings window. The useridd log shows: 2022-03-22 14:42:09.136 -0700 connecting to ldap://[dcserver]:636 with StartTLS...2022-03-22 14:42:09.140 -0700 connecting to ldaps://[dcserver]:636 ...2022-03-22 14:42:09.164 -0700 ...

Device Certificate Issue

Hi Team, We are facing an issue with the device certificate. I have generated that OTP in the CSP portal and imported it into the firewall after I am facing the below issue "Failed to fetch device certificate. Failed to send a request to the CSP server. Error: Operation timed out after 60000 milliseconds with 0 bytes received." Attached the scre...

AhamadullahM_1-1648729460922.png

Adding ping/icmp as a service, or configure "Application Default" under service

Simple question: Can a service for icmp/ping be created, or should I just configure "Application Default" under Service? We have ping/icmp defined under Application, but we also have specific services configured also and ping will not work, falls to the clean-up rule. It's my understanding that if you have specific applications configured that o...

Resolved! URL Category Any

Is there any body has got URL Category Any?I check the URL List document and there is no Any category.Also, I had find a category called "uncategory".Will Allow/Block List IP addresses will be categoried in "uncategory"?What's the difference between Any, unknown and uncategory?

Resolved! SAML authentication broke after upgrading to pan os 10.1.4-h4

After the upgrade of Pan-OS from 9.1.11 to 10.1.4-h4 last night, our SAML authentication does not work. We have a setup to authenticate the administrators logging into firewall using a SSO SAML profile which redirects to okta and we get authenticated over there.It was working totally fine with the 9.1.11 version but as soon as I upgrade to 10.x ...

Akhil_B by • L2 Linker
  • 4056 Views
  • 1 replies
  • 0 Likes

MineMeld behind proxy server - Using docker

I am trying to use a proxy for MineMeld Internet connectivity, and I have assigned proxy settings to the container instance. For some reason, it is not working and I probably need to especifically set proxy settings in the MineMeld application, but I am struggling to do it. We are running dockers on SLES. Any idea about how to maki this work? Th...

  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks