This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! GlobalProtect - failed to allow *.google.com through the VPN

hello everyone Merry Xmas, Our SSLVPN has tunnel split enabled, but I want to allow all my traffic or the *.google.com through the VPN, so I tried:1. added 0.0.0.0/0 to here, does not work.2. added *.google.com to here, does not work. Can please someone let me know do I still miss something? Thanks

DongQu_0-1640352331374.png
DongQu_1-1640352422177.png
DongQu by • L2 Linker
  • 8262 Views
  • 8 replies
  • 0 Likes

Firewall dropping HTTP only from specific source network

Hello. I've come upon an extremely strange situation that I'm hoping to get some assistance on. I've already opened a case with Palo support, but they seem to be at a loss as well. For one specific internal network, the edge Palo Alto is dropping HTTP (80) packets at the internal interface. Even more strange, it seems that packets are somehow ch...

mhill99 by • L0 Member
  • 3718 Views
  • 3 replies
  • 0 Likes

Palo Alto SDWAN zone

I am deploying Palo Alto SDWAN and the hub currently terminates dedicated L2 WAN circuits for each remote site. My plan is to build tunnels to each site across their dedicated L2 WAN and across the Internet. Example: Palo Hub connects to site 1 on e1/1.100, zone: site1Palo Hub connects to site 2 on e1/1.200, zone: site2 The current security poli...

BBartik by • L2 Linker
  • 2325 Views
  • 1 replies
  • 0 Likes

help

PA2020 had factory reset its show Unable to create directory /mnt/panrepoand can't into maintCan someone explain what the problem is?

ALiu25 by • L0 Member
  • 2872 Views
  • 3 replies
  • 0 Likes

40 g connectivity

Hi,I have the below topology PA has two 40 g ports and my core has 4 40g ports . server SW also has 40 g ports ( the switch is for connecting servers ) core required two 40g Ports for cross-connection.So remaining two 40g connections,Do I need to use it to connect the DC fW,or yes which link ?or Do I need to use it to connect to server swit...

pa1.png
simsim by • L4 Transporter
  • 4512 Views
  • 6 replies
  • 0 Likes

LDAP Authentication not working when using include group settings

Hi Team, We had configured LDAP authentication on Palo alto firewall. The LDAP server had been configured and we had checked the connectivity and it was successful. Created an group mapping and included an group in the include group mapping. Checked the groups and the user details via CLI of the firewall and could see that the user under the in...

Resolved! Transparenlty NATing IPsec traffic to other device

Hello, We have an issue with forwarding an IPsec connection to a VPN device behind the PAN-OS FW. So the setup is supposed to be the following:* PAN-OS is using outside interface 192.168.1.1/24* 192.168.1.2 is an address with DNAT to 10.10.10.1 on an internal vlanNote that the FW also processes IPsec VPNs itself on its own IP 192.168.1.1. NAT ru...

ifstciss by • L1 Bithead
  • 3034 Views
  • 1 replies
  • 0 Likes

Resolved! Cannot reach server at DMZ via Nat

Hi NAT is setup at PA for outside users to reach DMZ server based on protocolThe topology is like the below:SW1(f1/1) -------- (e1/1,DMZ)PA(Outside,e1/5)--------(f1/5)SW2Interface config:e1/1 10.100.255.1/24f1/1 10.100.255.2/24 as inside Servere1/5 44.33.22.1/24f1/5 44.33.22.2/24 as outside UsersPlease see below PA configurations for NAT and Sec...

DavidyPalo_0-1640193938552.png
DavidyPalo_1-1640192264988.png
DavidyPalo_2-1640192562824.png

Agentless User-ID Not Connected (RESOLVED)

EDIT: I have resolved my issue... adding this in case someone runs into the same issue I did. Basically, I'm an idiot lol. Issue was because my AD servers are in a security zone and I needed to add a security policy that allowed the management IP address of the Palo into the AD Zone. Once that was added, I get a connected status in Server Monito...

Resolved! Firewall Events as Report

Hi All, Is there a way where, I can generate report of firewall events, Like login events from system logs, As daily basis. And I will share through email. NGFW

Migrate Panorama from VMware to AWS

Has anybody migrated Panorama from on prem to AWS? There are a few options that are available to us, and I am trying to decide which option is the best. Also, if you can list any "gotchas" during the migration that would benefit us, that would be really helpful.These are the options that I see. Option 1: Use SRM and our connected VMware on Cloud...

Fr4nk4 by • L2 Linker
  • 4919 Views
  • 2 replies
  • 0 Likes

Resolved! IPSEC ON SECONDARY ADDRESSES

Hello,just a little question it is possible to terminate a vpn-ipsec with a secondary adresses on external interface or I must use the main interface?thks,ALex

alle by • L3 Networker
  • 5234 Views
  • 3 replies
  • 0 Likes

Resolved! SSL forward-proxy certificate import

I've gerenated a CSR to give my enterprise CA. Now, I've recieved the enterprise CA-signed certificate ann imported it onto the firewall.The status reads "valid". The "Key" box is checked, however the "CA" box isn't. Also, when I select the certificate, the option for "Forward Trust Certificate" is grayed out. Did I do something incorectly when ...

Geoblocking Missing

We are on 8.1.21 - When creating a geoblocking rule I do not have the option for 'Regions' in my rule drop down. Is this due to my version OR do i need to upload a geoblocking list [how?] thanks!

  • 24458 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks