General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Global Protect Always On When Coming Into the Office

I finally got certificate based always on GP VPN working when my laptop is at home. 
It occurred to me that when people go into the office, they'd be on the internal LAN.
How is that normally handled? Since I currently have an egress separate from the 

...

Resolved! Why ip address are different at gui and cli

Hello, ip address was changed to below ip address via gui, please see the below first picture. but why cli shows different ip address at the same interface? and the the PA cannot ping itself. Anyone can help to explain it? Thank you

 

 

 

PAFrank_0-1621221800133.png
PAFrank_1-1621221875576.png
PAFrank by L2 Linker
  • 3039 Views
  • 3 replies
  • 0 Likes

ISP failure after 2-3 packet drops

We are using one VOIP application over internet which is disconnecting after drop in 2-3 packet. For seamless connectivity we are looking for ISP failure if 2-3 packets are dropping.

We can configure path monitoring ( By default ping interval is 3sec

...

Deepak_K by L3 Networker
  • 2320 Views
  • 2 replies
  • 0 Likes

Resolved! Globalprotect check operational system on the portal/gateway without collecting HIP data and using HIP profiles/HIP objects?

I found out that you can use the operational system without a HIP object/profile to do things on the Gateway/Portal even if the collection of HIP data is stopped on the Portal.

 

 

 

Portal config:

 

 

 

 

 

Gateway Config:

 

 

 

 

 

 

 

 

Can someone tell me why when

...

NikolayDimitrov_1-1621011523428.png
NikolayDimitrov_0-1621011296270.png

Global Load Balancer (DNS) for GlobalProtect Portal

Looking to set up multiple data center redundancy for GlobalProtect and I'm unsure if Palo Alto would support a global load balancer (GLB) for the solution.  We have global load balancer DNS servers that detect the status of our DC internet connectio

...

yostie by L0 Member
  • 5455 Views
  • 1 replies
  • 2 Likes

Resolved! Always On Global Protect and file share access

I now have GP connected automatically with a certificate pushed out via InTune. This is on a Surface Laptop running Win 10. I typically log in with face recognition. After I log on and notice that I have TCP/IP access through the GP connection and in

...

HTTPS Response pages

Hi,

 

I know that there are many threads here about this. We would like to show the response pages for https.

 

We saw this link but i have several doubts:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFKCA0

This command is en

...

BigPalo by L4 Transporter
  • 4505 Views
  • 9 replies
  • 0 Likes

Resolved! Block wetransfer Upload

 

Hello everyone,

I have a problem with allowing wetransfer to download and blocking the download,

Wetransfer is part of the 'Online-storage-and-backup' category.

The choice is to block this category and create a bypass just for downloading on wetransfer

...

QuentinH by L1 Bithead
  • 6213 Views
  • 4 replies
  • 0 Likes
  • 23727 Posts
  • 104 Subscriptions
Top Liked Authors
Labels