General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4465 Views
  • 0 replies
  • 0 Likes

TCP reset packets being dropped

Hello Everyone, I have TCP reset packets being dropped in the Palo when they are sent from tcp-rst-from-server or tcp-rst-from-client. I've taken a pcap to verify the traffic is being dropped. I've put in a ticket with support and their solution was to change the TCP Drop configuration in Zone Protection Profile to not reject Non-SYN TCP. I test...

brieann by L0 Member
  • 6382 Views
  • 3 replies
  • 0 Likes

Spurious hits from the Expanse webcrawler...

Much the same as the issue in this post: https://live.paloaltonetworks.com/t5/general-topics/incoming-traffic-from-palo-alto-ip-address/td-p/196099 only with a different set of IP addresses (34.77.162.0 - 34.96.130.0).Telling me that "we crawl on a regular basis" is decidedly NOT an answer!One, I am not a client of Palo Alto or Expanse, Inc, so ...

Block chrome specific version

We have an requirement of blocking old chrome version over Palo Alto firewall.Kindly check for below PA versions and confirm if we can block Chrome User agent below 93 version.

SurajN by L2 Linker
  • 2599 Views
  • 2 replies
  • 0 Likes

Cortex XDR certifications

Can you please let me know the name of the certificate for cortex XDR and more about the certification like how much cost involved, Validity of the certification and reference guide so on?

Multiple Certs w/ Overlapping Expirations

We have a certificate expiring and we just uploaded the new certificate to take its place. To avoid downtime, we haven't revoked the soon to expire cert and have the other one imported already. They are both in valid state. When the first one expires, will the 2nd (new) cert "take its place" automatically? Or will there need to be some manual in...

tseger by L0 Member
  • 4387 Views
  • 3 replies
  • 0 Likes

Resolved! Secondary external ip adress help me please

Hello there,First of all, my English is not very good, so I apologize. I'm new to Palo Alto. So I'm a bit of a novice. In the structure I use, there are 10.0.15.15 - 16 - 17-18-19-20 external world ip addresses. These are separately assigned as mail server, backup, wifi. Let's consider one of them as connecting the 10.0.15.19 Wifi network to the...

acigdem by L0 Member
  • 4488 Views
  • 3 replies
  • 0 Likes

facing difficuty in terminal server agent

One of our clients facing an issue related to the terminal server agent. when the user is trying to connect VMware, it is connecting directly but when the user gets disconnected due to fluctuation in electricity or some other issue that time when a user needs to launch the session again that time it's not getting connected. But if before the ses...

termina_error.PNG

Weird scrolling behaviour in the LIVEcommunity WebUI

Hi,I started today with paloalto LIVEcommunity. I am currently reading through many pages and as a personal behaviour I try to open interesting pages as new tabs without leaving the current one. After reading the current tab I switch to the next and so on. When switching to a tab from the LIVEcommunity that had been opened for a while within thi...

Edit Security Policies simultaneously

Hi All,I was wondering how can I edit all the security policy rules simultaneously If I want to make any change in specific field. For example I have 80 security rules and I want to change Source Address of each rule so how can I edit this field for all the 80 rules? Do I have to edit each rule individually or is there an easy way to do it? Any ...

syslog query

Hi team, We have 1000+ security policies and 2 Syslog servers. can we enable two Syslog profiles simultaneously on the same policy Also, how can we enable the Syslog profile in the bulk policy or in 1000+ policy we need to add the Syslog profile manually Kindly put your valuable inputs on this. Regards,Vishnu

VishnuPS by L3 Networker
  • 2719 Views
  • 2 replies
  • 0 Likes

Resolved! VPN failover with Dual ISP with single VR & single Firewall

Hi, Below link explains about vpn failover with dual isp and dual vr, but cant I use same VR. https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-a-Palo-Alto-Networks-Firewall-with-Dual-ISPs/ta-p/59774 Why its mandtory to use two VR. with regards,Ram

  • 24379 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels