This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! cli command to check dos attack

we have not implemented the dos or zone protection.Is there any cli command i can use to check the dos attack? i know below for now show counter global | match dos> debug dataplane show dos classification-table> show counter global filter aspect dos> show counter global filter aspect dos delta yes

MP18 by • Cyber Elite
  • 6614 Views
  • 2 replies
  • 0 Likes

Zone capacity

Hello We have PA 3060 device on 8.1 code, I know its current capacity is 40 zones. If I upgrade to 9.1 will that capacity for the zone increase? Thanks -Amin

Amin2 by • L2 Linker
  • 2247 Views
  • 1 replies
  • 0 Likes

VPN Client with PANOS8

Hi!I've recently had someone complain that the native macOS/OSX VPNclient wouldn't connect to the VPN (PANOS 8.0.6). Turns out that theywere using an unsupported macOS version, and weren't using theglobalprotect client 'because it didn't work'. The official responseto them is a) get a supported version of macOS b) use theGlobalProtect client.But...

dolonipo by • L0 Member
  • 2907 Views
  • 2 replies
  • 0 Likes

New Beacon 3.0 is now here!

Not sure if you guys knew, but the latest version of Beacon has been released Beacon 3.0 is now available for your learning pleasure. If you haven't checked it out yet, then you are in for a treat. Beacon has been the Go To place to go when it comes to learning about Palo Alto Networks products and devices.. Read more about it in the Bea...

jdelio by • L7 Applicator
  • 3156 Views
  • 1 replies
  • 3 Likes

Resolved! how to downgrade pan os from 9.1.11 to 9.0.10.

Hi Fellas, Can somebody guide for the subject downgrade process? Long story, short I have received new PA units. I want go live with the new one. But the new one is sitting @ PAN OS version 9.1.11. While the old unit which is still in production is running on PAN OS 9.0.10. I know its easy to upgrade the older firewall to 9.1.11. But sadly our ...

Session length calculation - PaloAlto

Hello, does anybody know, how exactly the Session length for a session is calculated in PAN-OS?Is it depended on the system time?--> Would my TTL decrease if the system time changes and therefore reset my TCP session if the threshold of the TTL is reached (Or aged-out with UDP)?Regards,Eric

EMIND by • L1 Bithead
  • 6699 Views
  • 7 replies
  • 0 Likes

Anti Spyware best practice

Hi there, I wonder what's best practice in oder to identify theats via the Anti Spyware function. Most of the connections today are encrypted, so using the Anti Spyware function without ssl/tls decryption seems not to be a big security improvement. So there come the following questions to me:- is activation of ssl/tls encryption the only way?- h...

Netzer by • L3 Networker
  • 3314 Views
  • 1 replies
  • 0 Likes

Resolved! TRANSFER A VALID LICENCE TO A SECOND HAND DEVICE

HiHaving a PA820 with valid license and support.I am looking for official documentation to see if its possible to transfer my valid license to a second hand device purchased online.I m in Europe, device can be purchased from Europe as well as American continent. The secondhand device is unlikely to have a valid licenseThanks in advance.

TuncayG by • L0 Member
  • 9525 Views
  • 3 replies
  • 0 Likes

Configuration Log Report once a day?

Hey Folks,well i would like to forward Configuration Logs in a Daily Overview. Same like if i configure "Device --> Log Settings --> Configuration". But i don`t want to send every single entry, instead i would like to have a schedule for "config changes of last 24 hours".Do you know if there is a possibility on this? As well in reporting s...

Resolved! BGP backdoor

Hi All, In my setup, i have the use case where i need to prefer an IGP over eBGP route. One of my objectives is to try not to change BGP AD. In Cisco routers there is a feature known as BGP backdoor which allows you to prefer an IGP route over eBGP route. How can i make an IGP route preferable over an eBGP learned route? Can this be done on PA w...

IPV4 to IPV6 Internet not working

IPV4 to IPV6 Internet not working We are facing an issue accessing the internet. we have an IPV6 internet connection. we want to access the IPV6 ISP link from the IPV4 LAN subnet. we have created the source NAT policy using NAT64. but unable to access the internet. pls, help. thanks in advance

Resolved! Netflow & 3200 Series

We need clarification if our 3260 firewall requires an L3 interface for Netflow exports. The link below, "HOW TO VERIFY AND TROUBLESHOOT NETFLOW," states a 3200 series cannot use the mgmt interface, but I can't find any other sources that state the mgmt interface cannot be used.Also, to confirm, do we need a separate Netflow profile for each of ...

  • 24415 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks