This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! No valid device certificate found

We have upgraded only Panorama to panos 10.5 , after that we are getting below system alert from all firewalls :SYSTEM ALERT : high : No valid device certificate found What is the meaning of this alert ?We haven't enabled the features mentioned in below link , still we are getting this alert for all managed devices https://docs.paloaltonetworks....

Deepak25 by • L3 Networker
  • 12466 Views
  • 3 replies
  • 0 Likes

Using Objects Custom Vulnerability

Hello,We have an object so that from the wifi networks for mobile devices (mobile or tablets) if you connect by a pc to it can not go out.We are doing this for the Vulnerability with the Threat id XXXX with the condition Pattern -mach http-req-headers and there are different headers.The problem is that when the traffic is HTTPS it does not show ...

Alpalo_0-1647425327125.png
Alpalo by • L4 Transporter
  • 3338 Views
  • 3 replies
  • 0 Likes

Resolved! Can I use a wildcard in an FQDN object?

Having an issue logging into an online marketing screen tool called screencloud. The browser throws a CORS error once they hit login and the web application throws Unexpected_API_Result. The only way for our marketing staff to sign into this specific service is to use their personal device or cell phone. Any company equipment either on site or...

ksauer507 by • L3 Networker
  • 45108 Views
  • 2 replies
  • 1 Likes

Using IP wildcard masks in security policy rules

I have been adding IP wildcard objects into security policy rules and they have been working until yesterday when I added some new rules with several wildcard objects. I have looked on the support site to see if there are any limitations on how many wildcard objects you can use in a rule and/or in a policy and I have not found anything. I have...

Resolved! Generate Report PDF

Hello, our user using PA850 and PAN 10.1.3 and they want to generate PDF Report for 30 Days.They was config the Managed Report PDF last week, and when they came to Reports, the report is empty.FYI, the device is deploy about 2-3 week ago, should i wait to 1 month for the report create automaticly?The reports can download PDF but only 1 day,but n...

DennyChanditya_0-1647253134579.png
DennyChanditya_1-1647253191117.png
DennyChanditya_2-1647253384343.png

How does the Wildfire handle RAR & JAR files

Hello everyone, If I have the valid WF license and I enable the forwarding the RAR & JAR type. What the WF does when RAR & JAR file is being received? Does it analysis thoe files located in a JAR or RAR archive? Just wanna know.Thanks

Resolved! Most stable version of GlobalProtect Client with linux support?

Good Morning All, I'm relatively new to the PA world, we recently moved away from Meraki MX devices and have upgraded to a PA820 for our main office and PA220s for satellite offices. I have a couple of linux users that are having issues with not being able to use CLI tools and the menus are scaling strangely in 5.2.6.What do you folks see as the...

Firewall collects huge number of syslogs into a giant file then sends it causing delays.

We are having a huge problem with only one of our syslog destinations. Instead of sending the syslogs as they are generated, the firewall is collecting them into a huge file (10-40GB) and sending this a few times a day. This is ridiculous and is making the syslogs useless. It is only doing this for one of 4 syslog servers. Percent utilization of...

Resolved! Unable to See Rule in Output of Running Config

Hello. I have read only access to our firewall and in the past could do the command show config running and see all the rules in use. Now, I don't see near as many as used to. If I go to the web GUI and Monitor tab for instance, there is a rule named APP34-ROW-09-PAN that's actively allowing or denying traffic. If I search this in the cli ou...

c89217 by • L1 Bithead
  • 3962 Views
  • 4 replies
  • 0 Likes

Log at session start??

Hello everyone,What I read the best practice is to enable log at session end, is there any use case to enable log at session start?any thoughts?thanks

Host machine behind Palo Alto VM firewall

Hello all,I am running PAN-OS 10.0.1 VM series firewall in VMware workstation. Currently I have a windows 10 VM machine behind the firewall. My interfaces are set to eth1/1 is the outside interface which is set to my home network. Eth1/2 is my inside interface which is set to a 172.x.x.x/24 subnet. I have a default route point to my home route t...

Owen1 by • L0 Member
  • 2737 Views
  • 2 replies
  • 0 Likes

GlobalProtect OTP (Googleauthenticator)

Hi,I have GP configured using LDAP for authenticating. Now i would like to configure LDAP with OTP (Google authenticator). So i have several questions:-Its possible to configure LDAP+Google authenticator? is there any procedure o manual to help?-In order to not impact in the current GP connection. Its mandatory to use another public IP for this ...

BigPalo by • L4 Transporter
  • 2214 Views
  • 1 replies
  • 0 Likes
  • 24427 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks