General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 658 Views
  • 0 replies
  • 0 Likes

PANOS 10.x - share interface in Multi-vSYS mode

Hello All,

 

We are working on a design to move Cisco ASAs firewalls into PA 5260 with Multi-vSys mode enabled, so each Cisco ASA is a separate vSys. 

 

While everything else looks like nice and easy-to-convert, we have problems with shared interface. In

...

Problem reaching MGMT by vpn

Hello

A few days ago we upgraded from version 9.0.10 to 9.0.14, after that we lost the management from the VPN S2S, everything is fine , however, in the connections we see that there is no response from the Firewall to our queries. In the monitor we o

...

Resolved! Palo Alto Apps / Hub unreachable for days

I've been trying to access the Apps hub (https://apps.paloaltonetworks.com/) for days now and I keep getting this error:

{"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred"}

Is there any ETA when this issue w

...

Replace firewall order

I have a question about upgrading a firewall to new model.  I've done it in the past but always seem to forget the order.

 

I have a firewall that is managed by Panorama, with some local policies also.  I have downloaded the device state from the exist

...

ce1028 by L4 Transporter
  • 3293 Views
  • 4 replies
  • 0 Likes

Disk-Space issue

Hi Team,

We are using PA-3020 and the disk space is usually used upto 95% and we have enabled agressive cleaning as well as we do manual cleaning once a week where the disk-space utilisation is below 95% and in a week it gets utilised upto 95%.we need

...

HTTP2 allowed without strip alpn enable

Dear Team One of my customers wants  HTTP2 benefits with decryption enable.

The customer don't want to enable the strip ALPN because it Downgrades to HTTP1.1 

Can we do decryption with HTTP2 Downgrade with decryption? 

Logged in Admins _cliuser normal?

Hi there,

 

Today I accidentally discovered the user _cliuser in the widget Logged in Admins on the dashboard of our Palo Alto Firewall.

 

After a few seconds it was gone.
Unfortunately, I didn't find anything through the search, and seeing this for the f

...

kenanuenal_0-1633340167871.png

Layer 2 tunnel on a Palo alto

Can you create a layer 2 tunnel on a palo alto 3050? Is a layer 3 tunnel better than a layer 2 tunnel? Is a layer 2 tunnel more of a private or direction connection than a layer 3?

jdprovine by L4 Transporter
  • 6684 Views
  • 3 replies
  • 0 Likes

VLAN Insertion and subinterface - VLAN1

Hi, I'm new to the community and am trying to assist a customer as they work on a PAN and SW integration for an industrial setup. Customer has setup a L2 network between different industrial devices that seat in different VLANs and are all connected

...

Resolved! Delete Vsys

Any advice on deleting a vsys? 7050 OS 9.0.11

 

Simple as selecting vsys under Device Tab and deleting?

 

Thanks

clewis1 by L3 Networker
  • 5462 Views
  • 6 replies
  • 0 Likes

Regarding threat visibility not being shown.

We have deployed Palo Alto in tap mode to get traffic visibility, we have configured PA VM 100 with active trial license,  We have visibility of Traffic logs but the threat logs are not visible. 

In policy configuration for tap mode we also have assig

...

Resolved! Block PSIPHON 3

Hi all,

 

Does anybody already try with success to block Psiphon (https://www.psiphon3.com) ?

It's quite easy when psiphon is configured in VPN mode but how can I do that when VPN is not used ?

 

Thanks in advance for sharing.

 

V.

VinceM by L5 Sessionator
  • 26536 Views
  • 13 replies
  • 0 Likes

Users and group mapping

Hello everybody!


Sometimes users' group memberships are not recognized by the firewall integrated user id agent. In the useridd.log we see this message:


2019-03-29 10:12:45.317 +0100 Warning: pan_user_group_user_prime_uid_lookup(pan_user_group_multi_at...

  • 24112 Posts
  • 117 Subscriptions
Top Solution Authors
Top Liked Authors
Labels