General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4468 Views
  • 0 replies
  • 0 Likes

Palo Alto admin UI single sign on with Okta

Configured the Panorama SAML authentication for Admin UI SSO integration with Okta.I followed the Okta/Palo Alto single sign on setup instruction. Here SP(Palo Alto) will initiate the SSO and Okta will acts as an IDP.https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Palo-Alto-Networks-Admin-UI.html?baseAdminUrl=https://gpmedicare...

Resolved! Adobe cloud whitelisting

I found some docs on whitelisting for adobe cloud which could be handy: Includes a whitelist: https://helpx.adobe.com/content/dam/help/attachments/Creative_Cloud_for_enterprise_Service_Endpoints.pdf Background http://wwwimages.adobe.com/content/dam/Adobe/en/devnet/creativesuite/pdfs/ControllingSvcAccess.pdf It could be handy to have this...

chirss by L3 Networker
  • 16938 Views
  • 4 replies
  • 1 Likes

Nat out to internet with overlapping subnets in two separate virtual routers

Below is an example diagram of my scenario. We have a subnet that is part of our production network, and then we have the same overlapping subnet for testing and disaster recovery which exists in a separate virtual router. I've oversimplified the drawing, so hopefully this makes sense. For testing purposes, the overlapping subnet in virtual r...

Screen Shot 2022-02-02 at 3.36.37 PM.png
buck1 by L1 Bithead
  • 6724 Views
  • 5 replies
  • 0 Likes

Resolved! User-ID - LDAP - Different domains at samAccountName and userPrincipalName

Hello all, the following problem: A Sub-AD-Domain in a forest with different domains at samAccountName and userPrincipalName. samAccountName: domain01\user01userPrincipalName: user01@domain02.com Dial-in with Global Protect via SAML with user01@domain02.com PA recognizes user as user01@domain02.com. All rules based on User-ID don't work, because...

Daniel_Treutle_0-1644137123103.png
Daniel_Treutle_1-1644137168688.png

Panorama VM - Decrease Size

Hi Community, I got a customer who has a VM Panorama with 1 TiB of local storage.Now we have a SIEM solution installed, where the long-duration logs are stored, so the Panorama disk storage is oversized now. I know there's a guide to add disk space to Panorama VM, but no solution to decrease space. Does anyone know, if there is a solution to def...

Chacko42 by L4 Transporter
  • 3609 Views
  • 3 replies
  • 0 Likes

GloablProtect WFH Split Tunnel Domain-Include issue

this semi coincides with the zoom discussion I've setup Split tunnel and added a bunch of domains *.whatever.com into the split tunnel include domain tab. This works half the time and the other half not at all. I've tested on mac and windows. I'm also seeing zoom traffic across my vpn tunnel even though I have excluded the domain names and zoom...

Resolved! Any way to throttle MS Updates

All of our instant clones decided to update this morning and it's killing my Internet pipe. Is there a way I could limit the amount of bandwidth us for MS Update? Something fast and easy?

palomed by L3 Networker
  • 6385 Views
  • 3 replies
  • 0 Likes

Resolved! vSE Summit 2022 invitation

Hi everybody, I just received an invitation to the "Palo Alto Networks vSE Summit 2022" sent from Jeremy Behrle, but I'm not sure this is an official Palo Alto Networks or PAN Partners' event. Searching into the Palo Alto Networks event calendars, I'm not able to find anything about this particular event: https://www.paloaltonetworks.com/resou...

grenzi by L3 Networker
  • 3423 Views
  • 2 replies
  • 0 Likes

change account information

i want to change my phone number on my paloalto partner account (Global Cybersecurity Leader - Palo Alto Networks) and there is no icon to change it

Globalprotect and SAML

Hi all, After enabling SAML authentication on the globalprotect vpn I can no longer assign vpn attributes to different users such as the IP pool and include routes. Mapping users is out of questions since my organisations has 5000+ users. I am in a situation where the only solution would be to configure one vpn per firewall. A scenario that I am...

Panorama Ethernet interfaces IP settings greyed out

Hello All, We have 2xM600 appliances in HA pair. We want to separate SSH/HTTPS management and device management/loggin collector communication on different interfaces, e.g.: 1. SSH/HTTPS access to Panorama will still be on Management interface as well as Log Collector communication;2. Device management will move to Ethernet 1/1. I was able to ...

  • 24379 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels