This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Downgrade panorama ha managed device.

Hi, I have the following situation, a HA cluster managed by panorama. For testing purpose I would like to downgrade it to an 8.1.21 release. Coming from 9.1.12 release.Couple of question:Should I always perform upgrades / downgrades from Panorama, I they are panorama managed?(upgrading cluster I did without panorama using Ansible script and ma...

GOMEZZZ by • L2 Linker
  • 3034 Views
  • 1 replies
  • 0 Likes

QoS / WRED

Hi All, Just wondering, is WRED configurable on PA firewalls?If the models matter, I'm using 3000's and 3200's. Thanks!

Luke_R by • L2 Linker
  • 2139 Views
  • 1 replies
  • 0 Likes

SCCM : Clients to DP communication

Following is the one of prerequisites to set up a SCCM infra, is there any existing app-id that can be used to cover this port requirement. Will it need an explicit rule based on port/service range only or any changes needed in VR (IP multicast perspective) as well. Prerequisite :Client --> Distribution point configured for multicast, bo...

Dip741 by • L0 Member
  • 2613 Views
  • 1 replies
  • 0 Likes

Resolved! Palo Alto Packet Capture Vs Monitor Vs Session Browser

Hi for a beginner why what does the packet capture enable me to do that the Monitor and Session Browser do not ? If possible please could someone give me a scenario for packet capture that identifies a problem which the other two would not pick up - is it the way traffic conversations are shown ? With the capture obviously you would be able to s...

MineMeld on Ubuntu 20.04 LTS

Hi Community, since April 2021 is getting nearer, Ubuntu LTS 16.04 is getting nearer to end of life. Is there any version successfully tested for Ubuntu 18.04 LTS or 20.04 LTS? Last time I tried installing it, installation failed due to dependencies or "bad gateway" errors when logging in to MineMeld. Is there a roadmap in general? Looking...

Chacko42 by • L4 Transporter
  • 8069 Views
  • 7 replies
  • 1 Likes

Any chance of an Automated Rollback on Palo Alto firewalls?

Hi- Im familiar with Juniper equipment which all have the option to 'commit confirm' which automatically reverts the config change if a 2nd commit is not made within a certain period (default 10 mins I think). Its a life-saver if you have to administer remote devices, bbvsince if your change broke connectivity for any reason, in 10 minutes time,...

Resolved! Azure Palo Alto - ARP Not Found

Hello, Im having a problem with my PA deployment in Azure where i get ARP Not Found counters increase. I can normally resolve the issue by manually adding an ARP entry to the interface with the MAC of `12:34:56:78:9a:bc` but its really not a solution, rather a workaround. The architecture is similar to the above. My Azure PointToSite Gateway giv...

arch (2).png
ashleyk_0-1593612662816.png
image.png
image.png
ashleyk by • L1 Bithead
  • 10940 Views
  • 2 replies
  • 1 Likes

Resolved! QoS Class Numbers

Hi Everyone! Just a quick question about classes in PanOS. I can see that there are eight classes named Class1 - Class8.As we use QoS profile rules to assign bandwidth and priority to a class, is the class I choose somewhat arbitrary? For example, I want to assign voice and video traffic to a class, and make it a high-priority class.Can I choose...

Luke_R by • L2 Linker
  • 4062 Views
  • 2 replies
  • 0 Likes

Automate policy and object tightening

Firewalls need to be able to improve their own status automatically by adjusting rules, policies and objects automatically to be more secure by using usage date. An example, system a talks to system b on a selection of ports all configured on the firewall. All designed and planned on human logic. After a month some ports have no traffic between ...

Can't access internet without globalprotect connected

Hello, i want to ask something about globalprotecti've configure the GP, and i test the GP to access the internal without problem. and after few hours, that i was called by the user and they told me, the users that work from home, they cannot access the internet without globalprotect connected. (user are not in office network) or now i tell the ...

Resolved! DNS Security - AntiSpyWare Profile/DNS Signatures/Policies Security Policy

Per the steps in the guide, I cloned the default profile and set about to configure the DNS Signatures tab of the new profile. I believe that I want to sinkholeboth the classic signature (with 100k rules in the firewall) and thenewer DNS Security signature which will query PANs cloud database.But then to effect these actions I need to add a secu...

palomed by • L3 Networker
  • 3458 Views
  • 1 replies
  • 0 Likes
  • 24427 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks