This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! GlobalProtect MAC Address Filter?

Hello folks, I am being asked if GlobalProtect could be locked down to only except a specific list of MAC addresses (our corporate laptops) only. I see information about Device Block list or HIP configuration. I don't really want to specify a block list, but rather an allow list and block everything else. Is that possible? We using PA 3020 ...

OMatlock by • L4 Transporter
  • 14053 Views
  • 6 replies
  • 0 Likes

Resolved! Unable to Commit

I've just changed the configuration of the management ip address, but can't commit the change. When I attempt to submit it I get the following error: admin@PA-3050# commit...ID population failedError: id 10630 is outside allowed range [1-3583](Module: device)Commit failed admin@PA-3050# show deviceconfig systemsystem {ip-address 192.168.0.50;ne...

Resolved! A connection issue between PA and SW

Hi, PA port e1/2 is connected to switch port f1/5(L3). Both devices can see each other's ip and mac address. The Virtual router and Security zone and Magagement profile Ping are configured. but both devices cannot ping each other. Did I miss some step? Thank you

Resolved! OSPF v2 and v3 in PA

Hi, ospf is configured at the PA. please see the below screenshot. but after commit, it shows the below error message. Based on the picture, PA is using ospf2, why it shows the erro message? Thank you

DavidyPalo_0-1640018474562.png

Globalprotect PanGPS service

Sometimes our Globalprotect client application stops working on windows 10 OS.It seem to start after an uninstall\reinstall happend.After the reinstall, GP works, but then when the user reboot or logoff\login to windows, and start GP,GP removes the PanGPS service and stops working. If I do a quick repair, it works again until the next reboot. I ...

URL Override is missing

Hello, I just upgraded to PAN-OS 9.0.0 succesfully, but I cannot find the URL Override setting? Does anyone know where is it located? Thanks.

qafcopa by • L1 Bithead
  • 4767 Views
  • 4 replies
  • 0 Likes

Port Mirror Query

Hi Team,Palo Alto port mirroring will forward only a copy of encrypted traffic "https" after decrypting itor also can forward un-encrypted traffic "http" as well

PA-220 not reaching Palo Alto

Our company was recently sold off and their IT department erased our firewalls leaving them reset back the to manufacturer’s configuration. I’ve built it back as much as possible, but I’m missing something. I’ve worked with other firewall devices, but PA is proving challenging. How do I configure it to connect to serverlist.paloaltonetworks.com,...

Where do I start?

Hi I'm a network engineer being tasked to take over our PA firewalls since the guy who normally handled them is leaving. Where do I even begin to learn about this stuff? I've never had to work with these before. Thanks

Resolved! why hacktool vulnerability is set to medium action alert?

Hello,I've been looking a history entries in our threat log and it seems to me that most of the default settings for vulnerabilities - "action" are set to low, for example to "alert" - although they classify the threat as "medium" or "high". For example in the screenshot below the threat of this hacktool is set to "alert". Shouldn't this be a se...

Capture11.JPG
roma by • L2 Linker
  • 3409 Views
  • 1 replies
  • 0 Likes

Palo Alto troubleshooting tool for IPsec

Hello I established an Ipsec tunnel (policy based) between palo Alto and Cisco FW.phase 1 & phase 2 are up and running but trying to transfer data, fail.Capture packet (merge recieved and transmit) shownSource : SYNDest : SYN ACKAnd then Dest : retransmit SYN ACK. If this capture is within transmit pcap, this mean the re transmission packet...

transmit.png

Resolved! Upgrade Minemeld Ubuntu 16.04 to 18.04

I tried a do-release upgrade on Ubuntu 16.04 LTS and it took me to 18.04 LTS without issue. However minemeld says "Bad gateway" when I try to log into it. I tried to check for updates and figured maybe the source would be changed from xenial-minemeld main to bionic-minemeld main ie)deb HTTP://minemeld-updates.panw.io/ubuntu bionic-minemeld mai...

ksauer507 by • L3 Networker
  • 3589 Views
  • 2 replies
  • 0 Likes

Resolved! Syntax for security policies without security profile

Hi all, in my security policies on a PA-firewall (or in panorama) I want to be able to filter out all the security policies which have no security profile(s) . I tried a few combinations in the line of (profile-setting/profiles eq 'none') but alas, no joy 😕 Is it even possible?

KenVaBr by • L1 Bithead
  • 3720 Views
  • 1 replies
  • 0 Likes
  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks