General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 549 Views
  • 0 replies
  • 2 Likes

REQUEST: Grace period for GlobalProtect patch checking

Problem:

 

Because of occasional issues with vendor patches, like MS had early this year, (see URL below), very few companies release patches/updates to clients or servers on the day of release. They test the updates first, then release them days or ev

...

No new Apps category appears

Hi,

 

According to the following note https://live.paloaltonetworks.com/t5/customer-resources/release-plan-for-a-new-app-id-category/ta-p/395753  from the version of apps + threats of 18/5 (8408-6715) we should see the new category "Saas" according to

...

Resolved! Global Protect do not ask for OTP

Hello,

 

i had configured a radius server (freeradius) that work with google_authenticator and active directory. So far this works that way:

 

- login via Global Protect Client with username and AD Password+OTP (password and OTP in 1 promt)

 

 

I need to en

...

Resolved! dns issue

Hi,

 

using an internal Dns server

client makes request for a domain ???.com and cannot get an answer.

from nslookup we see that it cannot resolve the domain.

internal dns server to public dns server rule has a spyware profile.

There is no threat log for t

...

panos by L6 Presenter
  • 9525 Views
  • 11 replies
  • 0 Likes

Address group convert to shared

Running version 9.0.12

Moving to a multiple vsys enviroment from a single vsys, we are not running Panorama.  

Looking to change all of the address objects in the first vsys to "shared" so the others can access them.  Thus far I have not found a way to

...

Wildfire updates chenge

Hi,

 

We have configured to download the "wildfire updates" every minute. So whats is the recommended value for this?

 

Sometimes we face this error, and we are thinking to increase the time for WF updates:

 

wildfire.JPG
BigPalo by L4 Transporter
  • 2524 Views
  • 5 replies
  • 0 Likes

Session timer getting reset for new syn packet

Hi,

I got the following scenario.

client -> Paloalto -> Server:1234

The client initiates a tcp session to server always using the same source port and same sequence number (verified in packet capture). The session time out is the default 60 minutes.

 

The

...

livewire by L1 Bithead
  • 4158 Views
  • 6 replies
  • 0 Likes

VRRP on routers connected to Palo Alto Firewalls

I have 2 Palo Alto Firewalls each connecting to Peplink Balance 310x routers. HA is configured between the two Balance 310x routers. What I am trying to achieve is communication between these 2 routers via the 2 FWs. The HA (VRRP) interface is in the

...

nickvardy76_0-1625050522210.png

Seeking palo troubleshooting advice

Im involved in a project to migrate away from old asa firewalls to a palo solution.

 

The process has gone well but myself and peers are stumped with an odd issue and looking for troubleshooting advice.

We have a number of https hosts in a dmz, nat'ed t

...

MikeB by L1 Bithead
  • 6822 Views
  • 12 replies
  • 0 Likes

Minemeld - Intune

Hi

 

Can anyone advise if we can use the O365 feeds to incorporate Intune access?

 

Looking at the O365 external lists that the firewall is retrieving from Minemeld, they doesn't seem to cover all the URLs / IPs required for Intune managed device acc

...

  • 23742 Posts
  • 110 Subscriptions
Top Solution Authors
Top Liked Authors
Labels