This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

WMI On server 2022 for USER-ID

Hi There, Have a pair of PA-3220s. User-ID was working swimmingly. Recently upgraded our DCs to Windows Server 2022 and WMI is routinely failing and showing "Not connected" under server monitor. Doing some reading on WMI and Server 2022, and it sounds like Microsoft did something under the hood in 2022 that required updates or changes from 3rd p...

kaumell by • L0 Member
  • 4248 Views
  • 1 replies
  • 0 Likes

Resolved! SSL certificate for passive firewall

There is an active passive pair having SSL certificate (management only) with different CNAMES (its own management IP). While the CSR generation and certificate import (signed by ECA) is successful on active peer, the CSR generated on passive peer is getting erased whenever commit is done from active peer. How to generate CSR and install SSL cer...

Resolved! IPSEC VPN - app-id

Hello all,We have a software ipsec connection that will be between an inside server and a server in the cloud. The PA will just be a pass through so to speak, (nating and security rule).The ipsec requires UDP 500 and 4500 and the IP 50 protocol. Do you know which app-id's I'll need for that?The palo has these 4 app-id's:ike tcp/500, udp/500ipsec...

roma by • L2 Linker
  • 7057 Views
  • 2 replies
  • 0 Likes

PA-5200 MIB file for SNMPv3 need them for monitoring

PA-5200 MIB file for SNMPv3 I need them for monitoring I find them here:https://docs.paloaltonetworks.com/resources/snmp-mib-files.htmlbut the file type is .md5 and .my, but I need file type .mib or .smi to work in the monitoring software. Where I can get those files for PAN-OS 10.1

Bulk way to search logs for many IPs?

I have a list of over a 100 IP addresses that I would like to search logs to see if there has been any activity. Is there a way to search the logs files by feeding the FW a file containing the IP addresses? Thank you.

ccfritz by • L1 Bithead
  • 3247 Views
  • 1 replies
  • 0 Likes

Resolved! using Azure MFA with Global Protect

Hello, To configure Global Protect to use our already Existing MS MFA server, I followed this KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkkCAC I think I had to do one or two extra things as well, but in any case it's working. However, it only prompts for the second factor if after I disconnect the Global Pr...

Extending Eval license

Hi there, My Eval Request is going to be expired soon, and I'd like to extend it for another 60 days but I don't know how? Could someone please advise me how to extend my Palo Alto Eval license ? As I can't see any options in Palo Alto portal for license extension.Thanks

AK74 by • L2 Linker
  • 3323 Views
  • 1 replies
  • 0 Likes

design help

Hi all , I have the above topology , Now the question where should iI keep the dmz zone on edge firewall or dc firewall Thanks

pa dmz.JPG
simsim by • L4 Transporter
  • 1878 Views
  • 1 replies
  • 0 Likes

FQDN resolution failures in Palo Alto

HelloWe are experiencing FQDN resolution failures in Palo Alto.The Palo Alto has connection to the internal DNS; however, it does not resolve the FQDNs. Please could you help us to verify this issue. Regards

Alpalo_0-1648455350096.png
Alpalo by • L4 Transporter
  • 2849 Views
  • 1 replies
  • 0 Likes

CPS average for DDos protection configuration

Hello Team, I have a problem with the choice of CPS average value. When i made the command show session info which parameter I have to consider to calculate my CPS rate average ? Number of allocated sessions or packet rate or New connection establish rate. Number of sessions supported: 196606 Number of allocated session...

Mamoudou by • L2 Linker
  • 4656 Views
  • 6 replies
  • 0 Likes

Palo Alto - dot1q tag Errors with Meraki switch

Hi, First post on the Palo Alto side for me. Used to post a lot on the Cisco Support Community forums 🙂 I thought I would ask around here if anyone had any ideas what might be causing this problem before I go ahead with some more troubleshooting myself. I have a Palo Alto PA-220 firewall that is connected to a Cisco Meraki switch. The switch is...

JouniF_0-1648114223727.png
JouniF by • L0 Member
  • 5452 Views
  • 1 replies
  • 0 Likes

Microsoft Quick Assist

Hello all, new to the group & firewall management, so please bare with me 🙂 Wondering if there's any information from anyone using Quick Assist? It opens in error & before I start digging, just thought I would ask.Please point me in the right direction if known. I'm currently looking for a single solution to provide IT support across a ...

  • 24427 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks