General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

File Blocking Type.

Hi team,

 

I want to block .pst .dat .csr files.

I know the PA FW works on file types rather than file extension, but i want to know .pst and .dat and .csr are which file types ?

 

 

Resolved! Panorama Integration with Firewalls

Hello team,

 

Can we add multiple firewalls to same device group?

 

We have one requirement where all the security and NAT polices are same for each firewall instance. So we are looking into something where there will be common device group polices, and

...

Vikashh by L2 Linker
  • 1782 Views
  • 1 replies
  • 0 Likes

Resolved! Question about Global Protect and ip pools

Hi

 

Can any one explain the difference between the ip pools

a) Global protect / gateways  ... external gateway / agent / Client ip pool

vs

b) Global protect / gateways  ... external gateway / agent / client setting / ip pool

 

so for

a) I can't reference an

...

Resolved! Transparent IP Mode Splice L3 Subnet possible?

I have a client that is currently using Sonicwall and wants to migrate to Palo Alto.  

Sonicwall supports Transparent IP Mode (Splice L3 Subnet) that basically can bridge the WAN subnet onto the DMZ interface.

Let say for example,

WAN Interface - 100.1

...

Blocking all files upload

Hi, 

 

Anyone has ever figured out how to block any inside hosts to upload any kind of file outside, but still allowing web browsing? The file blocking option support only specific type of files... and the APP-ID database doesn't have any king of basic

...

Fan Alarm

Hello,

 

I have an issue with PA-5220 FAN  the LED indicator is red.

 

 

when I check the system environmental logs below is the result:-

 

 

Do I need to change the FAN or any troubleshooting steps for this?

 

 

 

Jafar_Hussain_0-1586715542848.png
Jafar_Hussain_1-1586715650296.png

community version of MineMeld.

I am new to MineMeld time and the first day.   I have only download and install MineMeld on a VM and configured it successfully. I don't know what AutoFocus is, so I don't think I am using it. so I am using the community version of MindMeld. 

In foll

...

WillieW by L0 Member
  • 996 Views
  • 0 replies
  • 0 Likes

Resolved! Showing Active Debugs

Hi All,

 

 

I come from a Cisco background and now getting to play with PAs  I have a few queries around debugging from CLI.

 

Can we debug multiple different protocols at the same time, e.g Phase 1, 2 for VPNs, maybe some ARP resolution at the same time

...

GlobalProtect with machine cert

Hi,

I'm having a challenge with GlobalProtect when trying to do ldap authentication with a machine cert (from internal MS pki).  I've tried both the computer and workstation authentication template, but neither worked.  GlobalProtect states certificat

...

ce1028 by L4 Transporter
  • 3759 Views
  • 6 replies
  • 0 Likes

Resolved! PAN self-cleanup

Does all the partitions showing below has self cleaning Capabilities or there is a need to manually clear those files like for eg I know old downloaded software can be deleted to free some space from  panrepo partition?

 

Filesystem Size Used Avail Use

...

Resolved! Want detach Gateway from Panorama

Hello team,

 

We have around 10 HA cluster managed through Panorama. now we need to detach/remove one HA cluster from it. Please guide me on the steps to be followed without creating any impact on production.

 

Also please confirm if it need downtime.

 

 

BK0007 by L2 Linker
  • 2388 Views
  • 4 replies
  • 0 Likes

Panorama M-100 Hardware vs installing in ESXi

Hey Everyone,

My company is looking at implementing Panorama to update and monitor the other firewalls we have at other locations.  Does anyone recommend the Hardware like the M-100 over just installing it on a server using ESXi?  

 

Thank you!

Top Solution Authors
Top Liked Authors