General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Viewing Unused Address Objects

Hello fellow engineers!

 

I'm in the process of a firewall audit in my environment and I've got a lot of address objects configured. I'd like to trim the list down and get rid of addresses that are no longer valid (as in haven't been used in over a yea

...

Resolved! custom url category with non http and https port.

HI,

 

I Have created custom URL category e.g  category name (*.xyz.com) Now I want to create inbound rule like below.

 

Source zone :- Internet 

Destination Zone :- LAN

Destination IP :- Any

Port :- 389 , 4172

URL Categary :- 'Custome category'

Security Profi

...

Resolved! Tech Support file guide

Hi All,

 

Does PAN offer a basic guide to troubleshooting using the tech support file e.g. which logs show what information etc?

Ben-Price by L4 Transporter
  • 8321 Views
  • 6 replies
  • 0 Likes

Resolved! Several Terminal Servers User-ID

Hi,

We are implementing User ID.

We have around 5 machines where we have Windows based user id agents installed and running smoothly.

Now we have around 150 terminal servers - including windows server editions, jumphosts etc. - where multiple users can

...

Resolved! security rule placement

Hi All,

 

I have an outbound web-browsing rule, rule criteria is source zone (trust) destination zone (untrust) , application (web-browsing, ssl), service (tcp-80, tcp-443)

 

If you are going to create more application specific rules, does it makes more

...

ce1028 by L4 Transporter
  • 7192 Views
  • 6 replies
  • 0 Likes

Zabbix Monitoring PA-7050 via SNMP v3

Hello.

I have a couple of PA-7050 firewalls that I monitor from Solarwinds Orion via snmp v3.  However, when  I try to monitor those same devices via Zabbix (SNMP v3), I am unable to get an SNMP response via the Zabbix application.  SNMPwalk works fin

...

torr06 by L1 Bithead
  • 5410 Views
  • 3 replies
  • 0 Likes

Resolved! DNS Proxy/Security

I was curious to know if anyone was pointing their domain controllers to the firewall for DNS security/proxy?  Mine currently use the ISP, but the clients use the firewalls as a proxy and then just rule just forward internal domains to the DC.  Seems

...

bschaper by L2 Linker
  • 5972 Views
  • 5 replies
  • 0 Likes

Resolved! Wildfire without SSL Decryption

We are looking at Wildfire for our PA firewalls however, we are not doing any SSL decryption. Going into it I figured we only be and to use it on unencrypted traffic. But looking at the Wildfire datasheet under file support it lists TLS and SSL files

...

bafergel_1-1627663836266.png
bafergel by L2 Linker
  • 2375 Views
  • 1 replies
  • 0 Likes

Resolved! Regarding sinkholed hosts

Hello Bros,

    We have subscribed to palo alto dns-security and the license has been applied to the device.

Rules with anti-spyware "dns-security sinkhole action enabled".

Now regarding the hosts with sinkhole action, that means these hosts trying to c

...

  • 23725 Posts
  • 104 Subscriptions
Top Liked Authors
Labels