General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 381 Views
  • 0 replies
  • 0 Likes

Resolved! IPSEC vpn between cisco 2900 and PAN

Hi everyone, 

 

I'm trying to setup a route based IPSEC tunnel between my PAN 3020 and Cisco 2900 router.  I'm getting a parameter mismatch on on the ipsec lifesize parameter and don't know how to fix it.

 

The Cisco peer appears to be wanting a lifesize

...

epeeler by L2 Linker
  • 4352 Views
  • 3 replies
  • 0 Likes

Resolved! Warnings DNS Security

Hello team,

 

I have cluster active-pasive PA-820 version 10.1.0

 

When I make a commit I recibe this alert " Warning: No Valid DNS Security License"

 

Someone helps me?

 

 

 

Regards

 

 

Alpalo_0-1631270781892.png
Alpalo by L4 Transporter
  • 3329 Views
  • 3 replies
  • 0 Likes

High CPU on the management plane

I am running 9.1.10 on the PA-850.  Last night, I replaced the User-Agent Server and pointed the PA-850 to the new UA server.  After that, the CPU on the management goes up to 100% and stayed there until I had to reboot the PA-850.  I attempted to re

...

dtran by L4 Transporter
  • 7540 Views
  • 3 replies
  • 0 Likes

Jio Meet application is not accessible

Hi Team,

 

Today i came up with an issue that i am not able to access JIO Meet application. While i was checking the applipedia website the JIO app was not there.

I came up with a solution to create a custom application. Yet not sure which ports are use

...

UID setup questions

All,

 

setting up windows based uid agent, looks FW connected to it is fine, but which shows connecting to the DC server.

From debug info,

 

09/08/21 22:05:08:082[Debug 355]: Event: type="server status" name="x.x.x.x" status="Connecting"
09/08/21 22:05:08:

...

AllanGao by L1 Bithead
  • 1860 Views
  • 1 replies
  • 0 Likes

Microsoft Radius Authentication with PA

Hi,

 

I am trying to setup Radius Authentication with PA. I have setup EAP(PEAP) and EAP-MSCHAP v2 on the windows radius server. However I can only login to the firewall using PAP. I have tried to import the certificate from the radius server but not s

...

umar00o by L2 Linker
  • 5979 Views
  • 6 replies
  • 0 Likes

Radius Authentication Failure: Timeout

Issue: Authentication failure when using AD Account 

Log: Authentication Timeout to server 

 

Setup:

PanOS Version: 10.1.1

Panorama is not used 

NPS Installed on Windows Server 2016

Radius Server Profile Created

Authentication Profile Created 

Admin Role Crea

...

X-Auth IPSEC tunnel for Mobile doesn't work

Hello there:

Recently I enabled IPSEC and X-Auth for the GlobalProtect Gateway, hoping to let my mobile users could use remote IPSEC access VPN. But it didn't work as my iPhone kept showing "user authentication failed'. I am pretty sure the configs on

...

FelixXia by L0 Member
  • 3058 Views
  • 3 replies
  • 0 Likes

Resolved! How to graph total number of UDP sessions over time

We're looking at setting up Zone/DoS protection and we would like to have a graph in order to establish a baseline. I've seen the ones within Pano health but those seem to be total numbers. We'd like to be able to see UDP separately. Is there somethi

...

HA1-Backup connection down

Dear Team,

 

We got the below error continuously, Crosschecked HA configuration is good only.

 

Pan os: 9.1.3 Device: 3020

 

2021-09-07 08:30:32.699 +0530 debug: ha_sysd_config_status_notifier_callback(src/ha_sysd.c:2870): Ending monitor increase holdup on

...

VishnuPS by L3 Networker
  • 3192 Views
  • 1 replies
  • 0 Likes

Vpn in Thailand and Asia

Is there anybody working from Thailand using Global Protect vpn?
I heard that the country can block vpn connection. While my company's configurations allow me working from Thai.

I'm planning to relocate and want to make sure i can work from there.

Would

...

Elena89 by L0 Member
  • 2740 Views
  • 2 replies
  • 0 Likes

CPS calculation per server

'Log at Session End, captures the number of connections at the session end." 
 
I am little confused by this statement. How does 'Log at Session End' help in calculating CPS for a server.
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/zone-pr
...

raji_toor by L4 Transporter
  • 4716 Views
  • 6 replies
  • 0 Likes
  • 23837 Posts
  • 112 Subscriptions
Top Liked Authors
Labels