General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4110 Views
  • 0 replies
  • 0 Likes

QoS / WRED

Hi All, Just wondering, is WRED configurable on PA firewalls?If the models matter, I'm using 3000's and 3200's. Thanks!

Luke_R by L2 Linker
  • 2030 Views
  • 1 replies
  • 0 Likes

SCCM : Clients to DP communication

Following is the one of prerequisites to set up a SCCM infra, is there any existing app-id that can be used to cover this port requirement. Will it need an explicit rule based on port/service range only or any changes needed in VR (IP multicast perspective) as well. Prerequisite :Client --> Distribution point configured for multicast, bo...

Dip741 by L0 Member
  • 2505 Views
  • 1 replies
  • 0 Likes

Resolved! Palo Alto Packet Capture Vs Monitor Vs Session Browser

Hi for a beginner why what does the packet capture enable me to do that the Monitor and Session Browser do not ? If possible please could someone give me a scenario for packet capture that identifies a problem which the other two would not pick up - is it the way traffic conversations are shown ? With the capture obviously you would be able to s...

MineMeld on Ubuntu 20.04 LTS

Hi Community, since April 2021 is getting nearer, Ubuntu LTS 16.04 is getting nearer to end of life. Is there any version successfully tested for Ubuntu 18.04 LTS or 20.04 LTS? Last time I tried installing it, installation failed due to dependencies or "bad gateway" errors when logging in to MineMeld. Is there a roadmap in general? Looking...

Chacko42 by L4 Transporter
  • 7723 Views
  • 7 replies
  • 1 Likes

Any chance of an Automated Rollback on Palo Alto firewalls?

Hi- Im familiar with Juniper equipment which all have the option to 'commit confirm' which automatically reverts the config change if a 2nd commit is not made within a certain period (default 10 mins I think). Its a life-saver if you have to administer remote devices, bbvsince if your change broke connectivity for any reason, in 10 minutes time,...

Resolved! Azure Palo Alto - ARP Not Found

Hello, Im having a problem with my PA deployment in Azure where i get ARP Not Found counters increase. I can normally resolve the issue by manually adding an ARP entry to the interface with the MAC of `12:34:56:78:9a:bc` but its really not a solution, rather a workaround. The architecture is similar to the above. My Azure PointToSite Gateway giv...

arch (2).png
ashleyk_0-1593612662816.png
image.png
image.png
ashleyk by L1 Bithead
  • 10500 Views
  • 2 replies
  • 1 Likes

Resolved! QoS Class Numbers

Hi Everyone! Just a quick question about classes in PanOS. I can see that there are eight classes named Class1 - Class8.As we use QoS profile rules to assign bandwidth and priority to a class, is the class I choose somewhat arbitrary? For example, I want to assign voice and video traffic to a class, and make it a high-priority class.Can I choose...

Luke_R by L2 Linker
  • 3838 Views
  • 2 replies
  • 0 Likes

Automate policy and object tightening

Firewalls need to be able to improve their own status automatically by adjusting rules, policies and objects automatically to be more secure by using usage date. An example, system a talks to system b on a selection of ports all configured on the firewall. All designed and planned on human logic. After a month some ports have no traffic between ...

Can't access internet without globalprotect connected

Hello, i want to ask something about globalprotecti've configure the GP, and i test the GP to access the internal without problem. and after few hours, that i was called by the user and they told me, the users that work from home, they cannot access the internet without globalprotect connected. (user are not in office network) or now i tell the ...

Resolved! DNS Security - AntiSpyWare Profile/DNS Signatures/Policies Security Policy

Per the steps in the guide, I cloned the default profile and set about to configure the DNS Signatures tab of the new profile. I believe that I want to sinkholeboth the classic signature (with 100k rules in the firewall) and thenewer DNS Security signature which will query PANs cloud database.But then to effect these actions I need to add a secu...

palomed by L3 Networker
  • 3329 Views
  • 1 replies
  • 0 Likes
  • 24332 Posts
  • 124 Subscriptions
Top Solution Authors
Labels