This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

can not able to download file after enable ssl decryption

Hi Team ..We have enable ssl decryption then we could not able to download big file. Downloading starts and after some time it automatically in reach to pause state.We disable SSL decryption then we could able to download file. Firewall side we did not receive any drop packet but global counter we have received the below the counter. admin@PA-E...

bit_byte by • L2 Linker
  • 4074 Views
  • 3 replies
  • 0 Likes

Password History

I am wondering if there is a way to clear password history. Due to audit requirements we need to have "Minimum Password Complexity" requirements including changing on first login and preventing Password Reuse. I am having issues keeping an account synched through templates and the password the same across all fws. If there is a way to clear the ...

Will this configuration work?

I will configure 14 VLANs in total. I will connect all Firewall Interface to one of the L2 Switch and I will cascade the other L2 Switches with that L2 Switch. In this case, do we need Trunk? Please check if any problem with such configuration.There will be no L3 switch and the Firewall will do all the routing.

FW-L2 Switch.png
Satyam by • L1 Bithead
  • 2407 Views
  • 2 replies
  • 0 Likes

Resolved! PAN-OS Upgrade from 9.1.x to 10.1.x Question

I would like to make sure my understanding of the upgrade path is correct before I do the upgrade. * Current installed PAN-OS version 9.1.10 - Standalone no Panorama* Below is a screenshot from the upgrade guide ( https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/pan-os/10-1/pan-os-upgrade/pan-os-upgrade.pdf) * Based on the upgra...

asiewert_0-1643907174448.png
asiewert by • L1 Bithead
  • 10204 Views
  • 2 replies
  • 0 Likes

VPN Tunnel IPSEC L2L VPN NAT not acting as intended

I am Labbing up a configuration I am about to go live with in production but it is not acting as it should when trying to apply a NAT rule to a tunnel interface. When I apply individual rules to the vpn traffic as I would like it to act I am not getting the intended result. I have to select bi-direction to get the NAT rule to act as it should. I...

alliman by • L0 Member
  • 2582 Views
  • 1 replies
  • 0 Likes

Resolved! Palo Alto Terminal Server Agent - How to monitor Citrix non-persistent virtual desktops

Hello, In our Citrix Virtual Apps and Desktops environment (On-prem 2106) we are only able to monitor user info from the XenApp servers where users launch a published application. Is it possible to monitor user info from non-persistent Windows 10 virtual desktops? Each desktop has its own IP address. Thanks!

Appid ms-teams-audio-video vs ms-lync-audio

We're having both legacy lync users and Teams users in our network. But for the life of me: I don't seem to get hits on "ms-teams-audio-video" .Is it because the data itself is not different enough so the contentid engine can't see the difference? Does it need decrypting to see the difference? Using the latest appid updates on a PANOS 9.1 If any...

KenVaBr by • L1 Bithead
  • 3091 Views
  • 1 replies
  • 0 Likes

Resolved! Log viewer not working for 8.1.13 PAN-OS

Cx facing this issue with PAN-OS 8.1.13 . From the policies tab when we are selecting log viewer option for any security policies rule then it redirected to the Monitor tab . Logs traffic tab there it is showing all firewall traffic and filter bar tab we could not able to see any filter.But another PAN-OS version we already checked we have found...

Sonu_Singh_0-1582119899809.png
Sonu_Singh_1-1582120233668.png
Sonu_Singh_2-1582120793761.png
bit_byte by • L2 Linker
  • 20199 Views
  • 16 replies
  • 1 Likes

Missing Secure Flag on the SSL Cookie after a vulnerability assessment ran on PA820

In my case, the team is performing a vulnerability assessment on PA820Vulnerability Title: Missing Secure Flag From SSL Cookie Description: The Secure attribute tells the browser to only send the cookie if the request is being sent over a secure channel such as HTTPS. This will help protect the cookie from being passed over unencrypted requests....

Barracuda to Palo Conversion

I've tried searching but have not been able to find much information. Does anyone have experience converting a Barracuda ng800 to Palo Alto? I'm working with someone that just received a pair of PA-5200 series firewalls and want to move their Barracuda config over to them.I don't think Barracuda is a supported firewall type in Expedition, but ma...

Resolved! GlobalProtect Certificate to Encrypt and Decrypt Cookies

Hi All,I'd like to find out what type of certificate you need if you are configuring Authentication Override for GlobalProtect Portal and Gateway. That is, for the option to specify a certificate to Encrypt/Decrypt Cookie (screenshot below), does this need a Machine Certificate, Web certificate??? Secondly, what is the behaviour if you don't spe...

override.PNG
Bocsa by • L3 Networker
  • 23347 Views
  • 5 replies
  • 1 Likes

GlobalProtect multiple gateways

Hi All, Similar to a Cisco ASA tunnel-group configuration where we can have different VPN configurations using the same public IP, I wonder if similar configuration can be achived on Palo Alto. My objective would be to configure different gateways using the same public IP address, however i haven't yet grasp how can i specify which gateway to us...

ipsec question

Hello,Do I need a tunnel interface for site to site vpn ? If yes How can I do that and what is the benefit Thanks

tifotano by • L0 Member
  • 1958 Views
  • 1 replies
  • 0 Likes

destination port in PBF

Is there an option to define destination port in PBF. Now if a service is selected, PA applies PBF if source or destination has that port.I am looking for a PBF which should match only if destination port is 80.

ceapen01 by • L2 Linker
  • 2700 Views
  • 3 replies
  • 0 Likes
  • 24453 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks