General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

SNI for GlobalProtect

Hi,

 

is there a way for globalprotect to only listen to a specific URL and forward all other FQDNs?

I already have webservers behind the palo listening to specific SNIs and would like to keep it this way.

 

CLIq by L3 Networker
  • 4698 Views
  • 3 replies
  • 0 Likes

OSPF Adjacency Issues

We've got a Cisco 7301 routers that forms OSPF adjacencies with an HA pair of 5020 firewalls.  Recently I swapped this router out with a different router with the same IPs but different configs to test a new WAN connection.  OSPF forms up just fine w

...

aglej by Not applicable
  • 13217 Views
  • 14 replies
  • 0 Likes

Resolved! DNS Proxy listen to broadcast?

Hello!
I have a cisco wlan accesspoint (at remote site), which lost connection to central wlan-controller. Due to a mistake this ap still has static ip-address, so it does not send DHCP-discover/requests when it is started. But it sends DNS-requests s

...

ChrisCon by L2 Linker
  • 3716 Views
  • 7 replies
  • 0 Likes

show log traffic equal api or cli (ssh and scp or api)

Hi

i am looking and recover on a machine1    example: "show log traffic log   (ip source destination port ect ..)

Machine1---> scp admin@palo   ---->show log traffic direction equal etc ...   export ..

 

or

 

https://palo/api/?type=op&cmd=<show><log traffi

...

axelfa by L2 Linker
  • 2054 Views
  • 2 replies
  • 0 Likes

Resolved! Help understanding application dependency tree

Hello all!   I am trying to find more information about the attached image - 

specifically when selecting an application in the process of creating a security policy, some applications appear to have dependency trees (shown) 

In this example of SNMP, 

S

...

Resolved! PAN 3220 10Gbps SFP compatibility?

Is it possible to use 10Gbps MM optics transceivers or copper in the PAN 3220?
I want to get 2Gbps to my edge and wondering if there's an option other than

bonding two 1Gbps ports. Thank you. 

DHCP stuck at offer

Hi Team,

 

I have configured DHCP server on PA.

It is working fine.

I check GUI and CLI  it shows one IP is sitting at offer

 

show dhcp server lease interface ethernet1/12

interface: "ethernet1/12" id: 75
Allocated IPs: 4, Total number of IPs in pool: 155.

...

Resolved! SCCM app deploy issue

I am working on testing improvements to our rule sets by breaking the rules into app groups as opposed to just allow all.

Pretty much everything is working fine except for OSD deployment via SCCM. In particular the O365 click to run installer. The dep

...

Jamesy by L2 Linker
  • 3149 Views
  • 2 replies
  • 0 Likes

Palo Alto and CIsco Jabber isssues with Global Protect

Hi,

 

We are having issues with cisco jabber using Global Protect.Clients reported that the jabber status (online/offline) is wrong so they have issue calling. The rule VPN-SSL zone to inside is any/any, so no restriction. Looking in pcap we can not se

...

BigPalo by L4 Transporter
  • 2416 Views
  • 1 replies
  • 0 Likes

IPSec Crypto / browsing issue?

Hi All,

 

I working on some firewalls and saw the GlobalProtect IPSec crypto profile but was using aes-128-cbc, I decided to change it to use aes-128-gcm, to take advantages of gcm benefits. 

Since that change, I have a user who is experiencing issues.

...

Digital Events are Coming to LIVEcommunity!

Hi everyone,

 

Yesterday we announced the launch of digital events on LIVEcommunity and introduced our first Ask Me Anything (AMA) event — a Q&A session focused on a specific topic where you can connect with experts! 

 

The first AMA event is taking

...

jdelio by L7 Applicator
  • 3005 Views
  • 3 replies
  • 5 Likes
  • 24197 Posts
  • 100 Subscriptions
Top Liked Authors
Labels