This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Error querying OCSP responder

We have an issue with the R3 root certificate caused by the OCSP Certificate Revocation Checking within our decryption profile. We're seeing all sites using this certificate being blocked due to unknown issuer. When we run the "debug sslmgr view ocsp all" we can see the responder URL as unavailable with error querying OCSP responder. We've chec...

are you permitted to remove all local admin accounts pan-OS 9.1 or higher?

hello all,I'm a PA noob who has recently just transitioned to a team that has a pretty heavy backlog. sorting through it, I see another team has requested that we remove local admin accounts from our firewalls. to my knowledge, the only local accounts on any of the FWs is the default account, with all admins authenticating using AD. I understand...

Website access issue

Hey team,The site is showing in cryptocurrency and getting blocked (https://www.tradingview.com/). As the checked site is showing under 3 categories and we do not want to allow cryptocurrency.As a workaround, we added the site into the custom category.So we need a permanent solution for the same. But as per the customer's suggestion, the site s...

ManishBhalekar_0-1644472022233.png

Resolved! Rename Device Group

Hi, We've just 'merged' policies for 2 set of devices in a same Device group and would like to rename Device Group to indicate the list of devices. For example : Original :Device Group AU - au-pa01, au-pa02 (active/passive)Device Group NZ - na-pa01, nz-pa01 (active/passive) After Merging/Changes :Device Group AU - au-pa01/02, nz-pa01/02Device Gr...

annielee by • L2 Linker
  • 8023 Views
  • 5 replies
  • 0 Likes

Free licenses

Hello,I wanted to deploy a virtual test environment with panorama and a cluster.Does anyone know if it is possible to get trial licenses for a few days to be able to include devices in panorama?Regards

Alpalo by • L4 Transporter
  • 4672 Views
  • 2 replies
  • 0 Likes

PA-220 /PAN OS 10

Does anyone know if the these pa-220 issues with pan os 10.x are planned to be addressed?Upgrading a PA-220 firewall takes up to an hour or more.PA-220 firewalls are experiencing slower web interface and CLI performance times. Also, is the Palo recommendation to keep PA-220's on 9.x? I've been holding off going to 10.x for all my models due to ...

deviceconfig -> setting -> session -> dhcp-bcast-session-on unexpected here

In November we upgrade to 10.1.3 and this error could not get resolved with TAC so we reverted back. We just upgraded to 10.1.4 and we are getting the same errors as before: deviceconfig -> setting -> session -> dhcp-bcast-session-on unexpected heredeviceconfig -> setting -> session is invalid From what we have read dhcp-bcast-ses...

URL blocking Web Advertisements with exceptions?

When i set our URL filter to block category 'web advertisements' it works as expected. However, it also blocks many of the results of Google and Bing searches. I understand that is because the results in question are web advertisements, strictly speaking. Ideally i'd like to block inline advertisements whilst allowing results from Google/Bing se...

Internal Host detection - Needed refresh connections in some devices

Hi, We enabled "Host internal detection" because user in company complanining about GP was taking the cursor. After configurin "Internal host detection" the GP stop taking the cursor but there are some users which its necessary to "Refresh connection" in GP to be efective. Any idea? why some users can need to "refresh connection" in GP?

BigPalo by • L4 Transporter
  • 2897 Views
  • 3 replies
  • 0 Likes

Resolved! Log quota utilization

Dear All, We have deployed a PA3220 firewall. Please let me know a command that I can use to check how much utilized from allocated quota for traffic log and I know I can use >show system logdb-quota to check retention date. I am looking a for a command similar to this that gives how much have been used from allocated quota. I would really ap...

Resolved! CLI to create Address Object and Address Group

I need to create 800 IP address and Address group into Panorama. May I know what is the CLI command able to help me to do it ? I have tried below command but return as invalid. set device-group D-DMZ address H-xx.xx.xx.xx ip-netmask xx.xx.xx.xxUnknown command: set #CLI Panorama

JiaXiang by • L4 Transporter
  • 9333 Views
  • 2 replies
  • 0 Likes

TS Agent is not working

I have installed TS Agent v10.0.0 software (x64 bit) on a Windows server in a Citrix environment. I have also configured on the Firewall the IP address of the TS Agent Server, I have allowed the firewall policies to grant access from Firewall to TS Agent server, and I can see the traffic is allowed. However, the TS Agent server is not connected...

njideobi01_0-1643791358353.png
njideobi01_1-1643791646337.png

PANOS 10.1.2 TACACS stops responding - needed reboot

I have an issue I was hoping to get some feedback on. I manage 27 different Palos and also Panorama. I have one FW that stops responding to the 2FA setup with TACACS+. All the devices are the same configs and all running 10.1.2 code. A simple reboot solves this (Band-Aid). I am curious if anyone else has seen this behavior?

mscaggs by • L0 Member
  • 2296 Views
  • 1 replies
  • 0 Likes
  • 24479 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks