General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 656 Views
  • 0 replies
  • 0 Likes

URL and Threat Licenses

I have recently ordered URL, Threat and 3 yr support for 7 PA-220's. The main S/N we are using for a test application did not get a license ordered, (oversight on my part). Can I use one of the new licenses from another S/N PA-220 to upgrade and test

...

Allow listing Dynamic IP sites

Hi All,

 

We have an issue where we allow list a domain using a dynamic IP, but the host calling the domain and the firewall resolve to different addresses and the connection is drops (in most cases).

 

We have looked at URL categories but seem to face t

...

AWaring by L0 Member
  • 2161 Views
  • 2 replies
  • 0 Likes

Help with using URL Category as part of a rule.

I'm trying to change my rules for allowing outgoing SFTP connections from using IP's to using URL's as more and more vendors are going to AWS and such and locking into an IP address doesn't work.  I cloned my current working rule which says server x.

...

Walt by L1 Bithead
  • 3275 Views
  • 2 replies
  • 0 Likes

Captive Portal Error Android - Iphone

Good afternoon, please your support, I have the following problem:

I configured the captive portal function.

 

Pan OS: 9.1.9

 

All the corresponding configurations were made, certificate, ssl decrypt, authentication rules, decrypt rules

If I connect to a W

...

Metgatz by L4 Transporter
  • 2817 Views
  • 1 replies
  • 0 Likes

eBGP between remote Palo Alto devices.

Folks,

Similar to Cisco routers we are checking if we can form remote eBGP neighbors between Palo Altos located in different DC's.

One PA is located in DC-01 and the second is located in DC-02

 

We are looking at this design to as both these Palo's form

...

nson2139 by L3 Networker
  • 3736 Views
  • 4 replies
  • 0 Likes

Resolved! PA and icap?

Hello world,

is there a chance/way of talking icap between my squid and the PA?

Thanks a lot

Marcus

Resolved! Test Mail getting failed

Dear Team,

 

We have tried to create a email scheduler, We don't have a local SMTP server. We getting the below error,

 

 

Please find the packet flow below.

 

c2s flow:
                source:      10.1.1.5 [LAN]
                dst:         172.217.194.109
 

...

VishnuPS_0-1630582731903.jpeg
VishnuPS by L3 Networker
  • 8187 Views
  • 2 replies
  • 0 Likes

Disable Weak cipher suite

Has anyone had success getting past a B on ssllabs for the globalprotect web portal

 

# TLS 1.2 (suites in server-preferred order)
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)   ECDH secp256r1 (eq. 3072 bits RSA)   FS   WEAK256

TLS_DHE_RSA_WITH_AES_256_CB

...

Joshan_Lakhani_2-1597424067542.png

GlobalProtect Portal SSL in PANOS 8

Hello all,

 

I have noticed an important difference in PANOS v8.0 in comparison with PANOS 7.x.x concerning the SSL settings for the GlobalProtect portal.

 

More specific, the famous site for SSL Server tests, Qualys SSL Labs presents PANOS 7.0.x with Gr

...

ggoudr by L2 Linker
  • 5405 Views
  • 4 replies
  • 1 Likes

GlobalProtect Split tunneling support on Chrome OS

We have implemented split tunneling in GP configuration for operating systems including Windows, iOS, and ChromeOS. It is working on all devices except Chromebooks. Doing further research, we are not very clear whether split tunneling is supported on

...

JatinSingh_1-1630476320899.png
JatinSingh_0-1630476280089.png

Resolved! FQDN with 80 characters not resolving in Address object

Hi All,

 

I have a client running PAN OS 8.1.3 Panorama 9.1.3, that is trying to implement an Address object with an FQDN that is 80 characters long. When clicking the resolve button in the Address object GUI it does not resolve. When running the comma

...

Ben-Price by L4 Transporter
  • 3308 Views
  • 2 replies
  • 0 Likes

Gmail, Me email not being allowed through on Mac Mail

Hi,

I use gmail.com and me.com for email.

when I used the web interface, no problem at all.

But when I use my Mac (OS X 10.6.6) Mail client 4.4, however I for some reason or another the client cannot access these two email accounts it just times out.

...

djbisbey by Not applicable
  • 4173 Views
  • 3 replies
  • 0 Likes
  • 23950 Posts
  • 113 Subscriptions
Top Liked Authors
Labels