This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Problems signing in to the support site

I have a PA-220 at home I have a problems signing in to the support site. I get the following message when I want to log in to the support site: An unexpected error has occurred. Please contact support. And of course I can't create a ticket regarding this problem. Any idea how I can fix this problem

Biga01 by • L0 Member
  • 2781 Views
  • 1 replies
  • 0 Likes

Resolved! Can "Decryption Mirroring" forward non-encryption traffic?

I am planning to forward all traffic to traffic collection tool. As I know there are "Decryption Mirroring" (https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/decryption/decryption-concepts/decryption-mirroring.html) and it will forward the traffic after decryption.I would like to know if the traffic is non-encrypted traffic such as htt...

JoeKwok by • L2 Linker
  • 4445 Views
  • 4 replies
  • 0 Likes

Network segmentation via routers VRFs to Palos VRs and OSPF

Hello everyone and thank you for your answers, I would like to implement segmentation in the data center, we will create VRFs in a Cisco Nexus Core switch and each VRF will have its own OSPF process to peer with a Palo Alto Firewall, all VRF traffic needs to go through the Palos for policy and routing, the question is: -Should we create multiple...

BBravo by • L0 Member
  • 15288 Views
  • 5 replies
  • 0 Likes

Very weird PanOS upgrade issue

We have a pair of active passive firewalls on PanOS 9.0.11. We have attempted to upgrade to 9.1.10 4 times out of which 2 times was with tech support. Upgrade seems to cause issue with some linux servers which are critical to us. As an example we have system running Nagios which starts alerting immediately for number of devices. And when we try ...

raji_toor by • L4 Transporter
  • 3013 Views
  • 3 replies
  • 0 Likes

Globalprotect client losing dns intermittently

hello everyone We have a intermittently issue with GlobalProtect client and the local DNS resolution. We have conigured local dns servers on network services and we have established "Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows Only)": YEThis configuration is working fine, but intermittently, the local DNS servers are not ...

AORTIZ by • L0 Member
  • 2566 Views
  • 1 replies
  • 0 Likes

Inbound traffic to DMZ issue

We have reports of certain users not being able to access our public website but majority of users are able to. The traffic log shows that the application is incomplete. Packet capture reveals the 3-way handshake does not complete and the session times out. The same person who is NOT able to access the public website is able to access another we...

x by • L1 Bithead
  • 8375 Views
  • 5 replies
  • 0 Likes

VPN IPSec Configuration Disappeared from GUI

An issue where I can’t view any configured IPSec Tunnels in GUI,From CLI, the IPSec tunnels appear normally. Tried failover, restarting management service, even rebooting both Palo Alto units, using different browsers, different computers, and export; import and load the configuration file with no success. Device Model: PA-5220 HA Mode Active-st...

PA-850 Migration to 10Gb SFP+ Interface

Hi, I have a customer who was a PA-850 firewall. There connection to their LAN is currently using a 1Gb Ethernet port (Port 4). They are in the process of upgrading the network backbone to be 10Gb and wanted to change their connection to the Firewall to 10Gb too. Is there any easy way to migrate all of the settings they have setup from port 4 to...

dvdkevin by • L0 Member
  • 4926 Views
  • 2 replies
  • 0 Likes

Resolved! Block Windows 7

I am trying to block Windows 7 clients from accessing the internet. I have followed the steps here: https://live.paloaltonetworks.com/t5/Configuration-Articles/Custom-vulnerability-signature-for-identifying-Windows-XP/tac-p/72273#M1496but I am unclear on what to set for the Pattern. Any suggestions/help to accomplish that goal will be apprecia...

GlobalProtect and "client sleep mode"

Hello,as described in the "GlobalProtect 1.1.6: Addressed Issues" (issue point 35361) the unnecessarily reconnection after sleep/hibernate mode should be fixed.We are using the GlobalProtect Version 1.1.7 . The portal configuration are:"On demand" mode, as authentication "certificate profile" only,single sign-on on, agent user override disabled,...

Hithead by • L4 Transporter
  • 13978 Views
  • 7 replies
  • 0 Likes

Resolved! Custom App for CRL downloads

Hi,I am trying to create a custom app that will match CRL downloads, to allow them without any questions ask. Shouldn't be too hard : on a previous web security gateway, I would match a pattern like the following: "http://([^/:])*crl.*\.crl"When translated to an app signature, I already know I am looking for two patterns, on the following contex...

dennisss by • L1 Bithead
  • 28645 Views
  • 20 replies
  • 0 Likes
  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks