General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Panorama not show rules shadow

Hello,I have several devices managed from Panorama. All in version 9.1.7 .When I commit from the team it shows the rules shadow warnings but when I do the same from the panorama it is not shown.Does anyone know the reason for this?Is it possible to see the shading rules from panorama?Regards

Alpalo by L4 Transporter
  • 5269 Views
  • 4 replies
  • 0 Likes

Resolved! Downloading software updates (Newer OS version) from VM series and Hardware boxes

Hi All, I would really appreciate if you can help me to clear this doubt. Do we need to register the serial number of firewall ( VM or Hardware box ) in https://support.paloaltonetworks.com in case if we want to download software updates ( Newer OS versions ) in a scenario where Premium Support licenses is not activated. Can we get PanOS updates...

VM-100 maximum number of interfaces on KVM

For some reason, after activating the license on VM-100, I still only see 8 interfaces even though I have interfaces configured in the VM settings.I thought KVM supports up to 25 interfaces.This is running on KVM on Ubuntu LTS 20.04

vm palo question on interfaces for esxi

We have an exisiting vmware esxi environment that has 3 hosts with distributed switches configured. Currently, each esxi host has 4 links (all trunks) going to the physical uplink switch. We've installed a VM palo series firewall and have established managment connectivity to it via eth1/0 with no issues. Now we are configuring sub interfaces o...

geewiss by L2 Linker
  • 7490 Views
  • 8 replies
  • 0 Likes

Block web advertisement with exceptions

Hi All. I'm looking for a good way to block web advertisements but make an exception for Google ads which appear when you do Google searches. Does anyone have a good way of doing this? Thanks

Mr8023 by L1 Bithead
  • 2542 Views
  • 1 replies
  • 0 Likes

False Positive Virus PDF

Hello,We are detecting that several PDFs that we share on our internal network are being detected as VIRUS.As we have the antivirus profile enabled in a security rule the session is reset .Does anyone know how I can avoid this?Regards

Alpalo by L4 Transporter
  • 2870 Views
  • 2 replies
  • 0 Likes

Resolved! Cannot connect to Globalprotect

Since updating Global Protect client, I can no longer connect to VPN. I can successfully connect to all our other sites. I’ve tried connecting on the OSX client & Windows Client. System logs suggest login succeeded. See screenshot attached of failure notice. GlobalProtect Logs show below. Nov 03 19:45:45:53609 Debug( 308): SSL connect f...

Error.jpg

Ipsec tunnel issue

there are two location site a and b in which i created a ipsec tunnel between them its up.As i ping there LAN IP i am able to ping. there LAN networkSite A LAN network is 192.168.4.x/24 Site B LAN network is 192.168.x.1/24.I am able to ping both the interfaces by cli and also check logs that are going through a tunnel.But the issue there are IPs...

Could Sophos in house users connect to GP of PA firewall

Hi Team I have a concer where we have a scenario.(Branch office )Sophos -----------ipsec----------- PA(head office) Could Sophos users that is branch office inhouse users connect to GP configured in Palo Alto firewall which is in head office. This communication should be via internal gateway not the external gateway. We have IPsec tunnel in plac...

Resolved! pandb-database will not install on Pan_OS 9.0.x

I have a couple of firewalls that are running Pan-OS 9.0.3 that I cannot get the pandb-database to install and update. At least I cannot prove that it is downloading and active. Until 9/30/19, the 9.0 docs for this were the same as the 8.1 docs. According to the new docs, it looks like PANDB is active, but when I check the status on 9.0, it show...

Resolved! What Panorama Mode should I be in?

I have two Panorama Servers, let's call them North01Pano and South01Pano. I also have two Log Collectors, let's call them North02Pano and South02Pano. Obviously the two LC's are system-mode: Logger. What is the preferred mode for the 01's and why?

Resolved! Obtaining Commit logs from vm-series

Hi All, Can someone guide me to where I can obtain an export of all the configuration changes made on the firewall and potentially export this into a csv?

Mr8023 by L1 Bithead
  • 5495 Views
  • 2 replies
  • 0 Likes

email alert

Is there anyway to have the palo email me when a rule has been enabled for a certain period of time? If not, is there anyway to do it via API? There has to be a way, yes?

Software failed to fetch the PANOS from server

Hey guys hope you doing well One of my customer have an issue to fetch PANOS version.PA-220 Current version 10.0.0The dynamic updates are not up to date as i see the latest dynamic updates installed on her firewall are month of april 2021.Also i am not able to fetch the latest PANOS.I checked the service route and policy for PANOS upgrade.Also ...

Palo alto application for practice.

Hi guys,I am studying currently for PCNSE certification. What palo alto application I should download if I want to practice? I am using an apple computer. I would appreciated if someone can send me a link about it. Thanks in advance

  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
Labels