This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Help With Configure PA-220

I am trying to build firewall from scratch. Our use case is to secure 3 servers with separate DSP connected to PA-220. We do not have any managed switch or router between ISP to firewall. It is direct from modem to firewall. Can anyone help with this? Palo Alto's documentation isnt helpful as I am not network guru.

Traffic monitor incomplete

I've got a new Global Protect portal/gateway. When I get connected to the gateway, I can see the connection via the GP monitor. Then if I go the to traffic monitor and search the source range 192.168.203.0/24 I only get traffic from previous testing that I've performed. I'm not getting the currently connected device to show up for some reason...

danoman2 by • L3 Networker
  • 3672 Views
  • 4 replies
  • 0 Likes

I cannot enter maintenance mode on a PA-220. I recycle power and have console cable connected - tried USB and also roll-over cable. Tried 3 different

I cannot enter maintenance mode on a PA-220. I recycle power and have console cable connected - tried USB and also roll-over cable. Tried 3 different software emulators - Putty, TeraTerm and Mobaxterm.When it comes enter Maintnenance Mode no prompt comes up most of the time, on the few occasions it does I can only type "Ma" and when I press ente...

ICT-FODC by • L0 Member
  • 8116 Views
  • 2 replies
  • 0 Likes

URL FIltering

I was curious if anyone knows why even when traffic is flagged as a threat by URL filtering there are still packets being sent and received?

Resolved! Certificate dependancies

Hi, We use a lot of certificates within our Palo Alto/Panorama setups. Is there a way to get a spreadsheet/PDF etc... to tell me what though certificates are attached to providing services for etc...? Is there a way to link certificates to what they do/are used for?

IPv6 and IPv4 addresses in same security rule?

is there an issue with doing this - I have a rule set to match any address except one particular IPv4 subnet (ie using the negate function) - works fine.I added an IPv6 prefix to the rule (still negated) - now the rule negatively matches the v6 address, but no longer the v4 address. Remove the v6 address from the rule and the v4 address negativ...

Resolved! Can someone describe the load balancing algorithm used for Aggregate links?

Reading the documentation and forum posts, it doesn't appear that the PA is using LACP, therefore, it's not using one of the 3 common LACP load balancing algorithms.Could someone describe how it's making the decision to send traffic down a particular link? Also, am I able to modify the behavior? (it doesn't seem like I can through the web inte...

austad by • Not applicable
  • 14491 Views
  • 8 replies
  • 0 Likes

Resolved! Renewing Certificate for GUI from External CA

We have followed the below document. After importing the newly signed certificate into the firewall it does not replace the pending csr containing the private key. PAN OS 9.1.11-h3, any one else experience this issue?Obtain a Certificate from an External CA (paloaltonetworks.com)

clewis1 by • L3 Networker
  • 4137 Views
  • 2 replies
  • 0 Likes

Resolved! Downgrade panorama ha managed device.

Hi, I have the following situation, a HA cluster managed by panorama. For testing purpose I would like to downgrade it to an 8.1.21 release. Coming from 9.1.12 release.Couple of question:Should I always perform upgrades / downgrades from Panorama, I they are panorama managed?(upgrading cluster I did without panorama using Ansible script and ma...

GOMEZZZ by • L2 Linker
  • 2994 Views
  • 1 replies
  • 0 Likes

QoS / WRED

Hi All, Just wondering, is WRED configurable on PA firewalls?If the models matter, I'm using 3000's and 3200's. Thanks!

Luke_R by • L2 Linker
  • 2112 Views
  • 1 replies
  • 0 Likes

SCCM : Clients to DP communication

Following is the one of prerequisites to set up a SCCM infra, is there any existing app-id that can be used to cover this port requirement. Will it need an explicit rule based on port/service range only or any changes needed in VR (IP multicast perspective) as well. Prerequisite :Client --> Distribution point configured for multicast, bo...

Dip741 by • L0 Member
  • 2580 Views
  • 1 replies
  • 0 Likes

Resolved! Palo Alto Packet Capture Vs Monitor Vs Session Browser

Hi for a beginner why what does the packet capture enable me to do that the Monitor and Session Browser do not ? If possible please could someone give me a scenario for packet capture that identifies a problem which the other two would not pick up - is it the way traffic conversations are shown ? With the capture obviously you would be able to s...

  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks