This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Understanding Top Attackers Report

Hello, The Top Attackers reports lists:Source AddressSource Host NameSource UserCountIn a report I ran, all of our source addresses are internal addresses. Why is that? Is the report more of a top talkers report than an attackers report? In other words, is the report more of a list high activity accounts or addresses? Is the Count the number...

Jeff by • L1 Bithead
  • 12038 Views
  • 8 replies
  • 0 Likes

Unable to sign into GP client with Azure AD SSO

Hi All, Trying to setup Azure AD SSO with Global Protect, but am receiving the below error. According, to the Microsoft documentation it means that the user is not assigned to the application in Azure, but I can confirm that the user is assigned correctly to the application. Is there anything else I can check?Thanks in advance.

BenPrice_1-1638510522152.png
BenPrice_2-1638510770774.png
Ben-Price by • L4 Transporter
  • 8160 Views
  • 4 replies
  • 0 Likes

Resolved! Allow traffic to specified hosts/networks when Enforce GlobalProtect for Network Access Enabled

We've been troubleshooting some issues encountered when using the "Enforce GlobalProtect Connection for Network Access" option in our portal agent configuration. Our TAC engineer mentioned that he had seen a setting called "Allow traffic to specified hosts/networks when Enforce GlobalProtect Connection for Network Access is enabled and GlobalPr...

OwenFuller by • L4 Transporter
  • 26542 Views
  • 20 replies
  • 0 Likes

PA-220 Generations / Versions

Hi All, As part of a large project I have been deploying PA220's, this has been ongoing for about 2 years and 130 boxes later. When I started the boxes were heavy as, then they were lighter and now we are onto the third variation of the PA220. Is there a list or resource that details the different variations or generations of PA-220's?? Thanks,Adz

Resolved! Panorama Log storage compression details

How does panorama log storage get handled when it comes to compression formats (panorama vm with log storage attached disks)? We have a setup where our vendor is guaranteeing some storage only if the vendor can compress those files in their own proprietary format. Does anyone know if panorama is compressing/storing logs in a proprietary format...

Sec101 by • L4 Transporter
  • 5631 Views
  • 5 replies
  • 0 Likes

Resolved! Upgrade PA-3200 from 9.1.7 to 10.1.3

Hello all,I have a PA-3200 that is currently running PANOS 9.1.7 and going to be updated to 10.1.3 in the near future.I am wondering if I could download version 10.0.0, 10.0.8-h4, 10.1.0, and lastly 10.1.3. I could then install 10.1.3 and it would get the files it needs from the other version downloads and go straight from 9.1.7 to 10.1.3?I beli...

thoffman by • L2 Linker
  • 2692 Views
  • 1 replies
  • 0 Likes

Basic PA FW Training Delivery

Hello PA World, Need the good community's help to deliver a basic PaloAlto FW course to trainees as part of a Networking Curriculum. Any open source resources that are available for training delivery are invited and thanked for in advance. Have already applied for the Trail VM but it may take 3 or more working days for review, dont have th...

Jpin108 by • L0 Member
  • 2071 Views
  • 1 replies
  • 0 Likes

Resolved! Issue with Ticket Support Application (Get Help)

Hello, I have a problem while creating a new ticket. When I arrive to select asset or serial, at the step that says "Find Asset Tenant ID/ Serial #" I can't select the asset and because of this, I can't end the ticket. Could anybody help me? Thanks.

How to view transceiver values on the cli

I need help finding the transceiver values in a PA-5220. In Cisco world the command is 'sh int e 1/5 transceiver details'. And it produces this output.Ethernet1/5transceiver is presenttype is 10Gbase-SRname is CISCO-JDSUpart number is PLRXPL-SC-S43-CSrevision is 1serial number is JUR1932GG49nominal bitrate is 10300 MBit/secLink length supported ...

Resolved! Captive Portal Custom Page

Hello, I want to implement a custom response page for our captive portal and I am not sure how the profile selects which page to us. Do I have to delete the default page or is there a way to select between two pages? Thank You

PA 3060

Hello I have A/P cluster PA 3060 with 9.0.9 I want to upgrade to 9.1.11 Can i directly do it ? Or do i have to download 9.1.0 first ? and then download+ install 9.1.11 Is downloading 9.1.0 necessary ?

Resolved! Captive Portal doesn't work for remote offices

Greetings to allI have the scenario described in the graph: I use Captive Portal based authentication for certain devices. It works fine for the LAN zone, but not for the WAN zone.In the WAN Zone we have remote offices that connect through the MPLS of a service provider. Then, over that data link, we build an IPSec tunnel to establish the connec...

adiazm_0-1630073510049.png
adiazm by • L1 Bithead
  • 4836 Views
  • 4 replies
  • 0 Likes

Layer 2 vlan subinterface restriction?

HelloI am using PA VM-50 and wonder if there is any restriction on the number of Layer 2 subinterfaces that I can create under 1 interface. I have more than 50 vlan subinterfaces created and the one I have added recently does not seem to pass traffic. Thanks

  • 24482 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks