General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Experiences with skipping the base image.

Hello.

so slowly but surely I'm upgrading a large number of palo alto's from versions 7.1.x to eventualy version 8.1.6( or higher)

 

In my palo alto training. and from some upgrades done before of pavm100 specifically. I always loved the fact that you c

...

Split Tunnel Routing Config Help

Looking for some help on split tunneling.

We are on PAN os 9.1.9 GP client 5.26, for our LAN we also use Cisco Umbrella to block sites.

What I want to do is when GlobalProtect connects I want all LAN traffic going through the VPN traffic, and all Inter

...

PA-5050-Data plane showing high

Dear Team,

 

Our Core firewall Data plane  CPU reaching to 99% , When we checking the traffic logs some MS-SQL application getting high usage, and system logs are showing "dataplane under severe load palo alto".

 

Pan os : 8.1.15-h3 ,Device : PA 5050.

 

Ki

...

VishnuPS by L3 Networker
  • 3206 Views
  • 6 replies
  • 0 Likes

Resolved! IPSec VPN certificates

I’m very new to Palo Alto and testing things out on a home virtual lab on local computer.  I’m trying to configure IPSec vpn between 2 sites using certificates.  My problem is that when I export the certificate from PA-1, I cannot import it to PA-2 b

...

ldapjazz by L0 Member
  • 2577 Views
  • 2 replies
  • 0 Likes

Storage V-Motion

Hello,

 

Our Virtualization team Storage vmotioned all the VMs on a specific host and that included VM-Series Firewalls for NSX as well.

 

Resulting that the firewalls pass 0 kbps of throughput and dropping all the packets. We were able to identify this

...

ayazdani by L1 Bithead
  • 2274 Views
  • 2 replies
  • 0 Likes

Resolved! Unable to export certificates

PanOS 7.0.1

 

Tested with Google Chrome and Firefox v56

 

When trying to export a certificate from Device tab --> Certificate Management --> Certificates, no matter which export format I choose, nor which certificate I choose, nothing happens.  Browser w

...

Incoming traffic being not logged on external IP

Hi 

 

Any help greatly appreciated.

 

I have 4 internal IPs w x y and z that need to route out on one of my external IPs (1.2.3.4).  And then I need the ingress traffic on 1.2.3.4 to be routed to w x y and z based on the incoming port number.  I am also

...

Resolved! IPSec VPN routing across multiple tunnels

Hi folks/.

 

I have a situaiton that is doing my head in, and I need some help.

 

I have an installation which looks like this

 

"A" end - Palo Alto Active/Passive cluster, public IP for IPSec VPN termination

 

"B" End - Juniper SRX cluster, Active/Active wi

...

darren_g by L4 Transporter
  • 12318 Views
  • 8 replies
  • 0 Likes

MAC addresses for HA interfaces

I have 2 virtual instances of PA-8.0 on a laptop in a home lab for learning purposes.  High Availability is configured in Active/Passive mode with HA1 using the management interface and it is working but HA2 is failing to sync and complete initializa

...

Resolved! VA scan issue

Is there anyway to solve those VA issue?

 

1) 90317 - SSH Weak Algorithms Supported
2) 42873 - SSL Medium Strength Cipher Suites Supported (SWEET32)
3) 70658 - SSH Server CBC Mode Ciphers Enabled
4) 71049 - SSH Weak MAC Algorithms Enabled

 

Kindly help plea

...

Vector by L0 Member
  • 2278 Views
  • 2 replies
  • 0 Likes

Global protect certificate expiry

Hi team,

Can we renew the server certificate used for gp before expiry can you please let me know if there would be any impact after renewing the certificate before expiry??

 

Or we need to renew the certificate before 1 day ???

 

 

  • 23698 Posts
  • 105 Subscriptions
Top Solution Authors
Top Liked Authors
Labels