General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! IPSEC VPN - app-id

Hello all,We have a software ipsec connection that will be between an inside server and a server in the cloud. The PA will just be a pass through so to speak, (nating and security rule).The ipsec requires UDP 500 and 4500 and the IP 50 protocol. Do you know which app-id's I'll need for that?The palo has these 4 app-id's:ike tcp/500, udp/500ipsec...

roma by L2 Linker
  • 7017 Views
  • 2 replies
  • 0 Likes

PA-5200 MIB file for SNMPv3 need them for monitoring

PA-5200 MIB file for SNMPv3 I need them for monitoring I find them here:https://docs.paloaltonetworks.com/resources/snmp-mib-files.htmlbut the file type is .md5 and .my, but I need file type .mib or .smi to work in the monitoring software. Where I can get those files for PAN-OS 10.1

Bulk way to search logs for many IPs?

I have a list of over a 100 IP addresses that I would like to search logs to see if there has been any activity. Is there a way to search the logs files by feeding the FW a file containing the IP addresses? Thank you.

ccfritz by L1 Bithead
  • 3229 Views
  • 1 replies
  • 0 Likes

Resolved! using Azure MFA with Global Protect

Hello, To configure Global Protect to use our already Existing MS MFA server, I followed this KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkkCAC I think I had to do one or two extra things as well, but in any case it's working. However, it only prompts for the second factor if after I disconnect the Global Pr...

Extending Eval license

Hi there, My Eval Request is going to be expired soon, and I'd like to extend it for another 60 days but I don't know how? Could someone please advise me how to extend my Palo Alto Eval license ? As I can't see any options in Palo Alto portal for license extension.Thanks

AK74 by L2 Linker
  • 3299 Views
  • 1 replies
  • 0 Likes

design help

Hi all , I have the above topology , Now the question where should iI keep the dmz zone on edge firewall or dc firewall Thanks

pa dmz.JPG
simsim by L4 Transporter
  • 1875 Views
  • 1 replies
  • 0 Likes

FQDN resolution failures in Palo Alto

HelloWe are experiencing FQDN resolution failures in Palo Alto.The Palo Alto has connection to the internal DNS; however, it does not resolve the FQDNs. Please could you help us to verify this issue. Regards

Alpalo_0-1648455350096.png
Alpalo by L4 Transporter
  • 2830 Views
  • 1 replies
  • 0 Likes

CPS average for DDos protection configuration

Hello Team, I have a problem with the choice of CPS average value. When i made the command show session info which parameter I have to consider to calculate my CPS rate average ? Number of allocated sessions or packet rate or New connection establish rate. Number of sessions supported: 196606 Number of allocated session...

Mamoudou by L2 Linker
  • 4626 Views
  • 6 replies
  • 0 Likes

Palo Alto - dot1q tag Errors with Meraki switch

Hi, First post on the Palo Alto side for me. Used to post a lot on the Cisco Support Community forums 🙂 I thought I would ask around here if anyone had any ideas what might be causing this problem before I go ahead with some more troubleshooting myself. I have a Palo Alto PA-220 firewall that is connected to a Cisco Meraki switch. The switch is...

JouniF_0-1648114223727.png
JouniF by L0 Member
  • 5402 Views
  • 1 replies
  • 0 Likes

Microsoft Quick Assist

Hello all, new to the group & firewall management, so please bare with me 🙂 Wondering if there's any information from anyone using Quick Assist? It opens in error & before I start digging, just thought I would ask.Please point me in the right direction if known. I'm currently looking for a single solution to provide IT support across a ...

Resolved! Destination NAT Round Robin for Load Balance Traffic for Web Server

I have 3 web servers which have 3 different static ip. .11.12.13 I follow below guide try to load balance the traffic for all 3 web servers. Configure Destination NAT Using Dynamic IP Addresses (paloaltonetworks.com) I already did those steps but instead of using FQDN, we use 3 IP address (192.168.x.11, .12 and .13). into an address group and pu...

JiaXiang by L4 Transporter
  • 17018 Views
  • 9 replies
  • 1 Likes

Low Disk Space on VM-500

Hi, How do I clear disk space on a VM-500? Software version 9.1.3 I noticed that there was an issue when the device stopped collation logs (i.e. traffic/threats etc...)When I looked at the disk space it says Is this limited space why the logging has stopped. No config changes have been made to stop the logging. How do I free up some space? TIA

CraigAddison_0-1648205390020.png
  • 24412 Posts
  • 125 Subscriptions
Top Solution Authors
Labels