General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 509 Views
  • 0 replies
  • 0 Likes

Connection HTTPS / HTTP and SSH not working

I can't connect via SSH HTTP or HTTPS to my PA-500 firewall .

I can ping it from my network and that's all .

Also , the strange thing it is that from panorama the device is reachable 

I have checked the traffic -> is allow

I have checked management inter

...

Nicu21 by L1 Bithead
  • 7264 Views
  • 5 replies
  • 0 Likes

Resolved! Failed to renew device certificate

Sorry, not sure what board to post this on, as it's my first support post.  Getting an error on my Primary PaloAlto firewall: Failed to renew device certificate.Failed to send request to CSP server.Error: OpenSSL SSL_connect: SSL_ERROR_SYSCALL in con

...

esheldon by L0 Member
  • 7708 Views
  • 2 replies
  • 0 Likes

Question about moving objects...

I have some security rules on a device group using shared addresses groups. I need to move these objects to the device group but I'm not finding an easy way so far. I can't simply move the address group, panorama doesn't allow because rules are using

...

Evahi21 by L0 Member
  • 2198 Views
  • 1 replies
  • 0 Likes

HA malfunctioned due to data plane down

Hello 

We have PA-3220 and its running 9.0.12. recently i saw that HA status is showing that "HA malfunctioned due to dataplane failed" and we cannot push any configuration on the firewall due to "dataplane failed" error message. 

Please suggest what c

...

Resolved! Fan noise on PA-850 gateway

I have a new PA-850 firewall. Its cooling fans are very loud even when idle. Is there a setting where the fan speed can be adjusted?

SSL Decryption and Reddit Posting

Last year I implemented a rule to allow users in my company access to the reddit.com site. It is in our company policy to disallow sharing messages on social media, so I implemented this rule with URL filtering (chat/messages/etc...) and only allowin

...

Migrating from a pair of 850s to a pair of 3220s!

It is my understanding that I should be able to export my config on the primary PA-850 and import it to the primary PA-3220.  I know that there are more RJ45 ethernet ports on the PA-3220, so I will update Ethernet1/9 to Ethernet1/13 and Ethernet1/10

...

Multiple External IPs to Multiple Firewalls

I am sure this is going to be something simple, but I am admittedly stumped (not hard to do).

 

I have a block of External IP addresses assigned by our ISP , say   172.10.10.10/29

 

The gateway is 172.10.10.10 . This contains a single physical port . Thi

...

peeryog by L1 Bithead
  • 2075 Views
  • 1 replies
  • 0 Likes

Resolved! push to devices failed after upgrade to 10.0.6

Push to devices failed after upgrade to 10.0.6, we currenty try to push a change on Panorama for a pair of firewalls

running all 10.0.6 , the commit to panorama went well , but after choice the specific device group and template stack we clicked valid

...

Internet speedtest from PAN

Is it at all possible to determine circuit capacity directly from the PAN?

Esentially what im trying to do is run a intenret speedtest directly from a PAN.

What would be perfect is the ability to run an iperf client direclty off a PAN

ivan01 by L0 Member
  • 11806 Views
  • 2 replies
  • 2 Likes

Resolved! Routing issue with Palo alto

Hello everyone!

I am experiencing an odd problem.

I have 3250 HA pairs. I have configured 2 aggregate(L3 trunk) interfaces and added sub interfaces to these aggregate.

The first problem is the firewall itself can not ping directly connected device by us

...

  • 24095 Posts
  • 116 Subscriptions
Labels