General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 2916 Views
  • 2 replies
  • 14 Likes

user-id server monitoring error: NT code 0x800705af

Dear community,

 

I´m trying to add a new AD server to server monitor list in order to retrieve user-ip mappings and get the following error:

" WMIC message from server XXXXXXX: NTSTATUS: NT code 0x800705af - NT code 0x800705af "

 

Does anyone have any id

...

Carracido by L3 Networker
  • 1735 Views
  • 2 replies
  • 0 Likes

Resolved! Password Profile

Hi Experts

 

We need to setup a password profile with the no expiry condition for the service accounts which has read only privileges. Version is 8.1

 

1. If we set the Required Password Change Period (days) to 0 days, does it mean it's expired (with 0 d

...

Live Community members - we want your feedback!

While we may operate the community from day-to-day, the Live Community is really YOUR community. Sure, we may have ideas about what might be helpful or interesting but since the community is yours and exists to help you, we ALWAYS welcome your ideas,

...

Resolved! Office 365 App-ID

Hi, 

 

We are in the process of implementing office 365. May I know what is the correct APP-ID for the below services? Please share if there is any best practice document for this. 

 

Microsoft Stream
Audio Conferencing
My Analytics
Azure Active Directory
Az

...

Resolved! HA Cluster Network Topology

Hi Everyone,

 

I'm new to Palo Alto and now I plan to deploy 2 Palo Alto 5250 in HA Cluster mode, each firewall take place in a Data Center. This two Data Center is in same City. That why I think HA Cluster suitable in this situation. These 2 new firew

...

QuangLe by L1 Bithead
  • 7145 Views
  • 8 replies
  • 0 Likes

Lot of non-syn-tcp

Hi Experts,

we have a lot (I mean a LOT :-)) of non-syn-tcp traffic on our PA5220 cluster. The PA is in an enterprise company. 

 

Are we sure that the non-syn-tcp means that there is an asymmetric flow? Let me give you an example:

 

1) Host A sends a SYN

...

paboy1 by L0 Member
  • 4763 Views
  • 2 replies
  • 0 Likes

Resolved! PA 5220 aho and dfa offload

Do i need to enable  aho and dfa or not ?

 

Running 8.1.9 on PA 5220

 

debug dataplane fpga state

aho offload not ready

dfa offload setup
Use software only

 

MP18 by Cyber Elite
  • 4971 Views
  • 7 replies
  • 0 Likes

PA and ASA n route mode

Hi,

I have the below topology  

PA and  ASA are in routed mode . 

The first question is the design is valid? 

I am facing a problem in this design 

ASA says the secondary is failed  ,primary asa says the secondary and dmz zone interface failed 

 

 

 

Thanks

pa-cisco.jpg
simsim by L4 Transporter
  • 1718 Views
  • 2 replies
  • 0 Likes

Secure web-GUI access for managment

Dears,

When i log in my firewall it is showing the connection not secure.

 

 

For secure connection login, i have gone through these documents and try to configure a secure connection for web GUI access.

 

How To Configure A Certificate For Secure Web-GUI

...

Jafar_Hussain_0-1606198282984.png

Panorama HA

Hi Experts, 

 

We've Panorama in HA mode running on 8.1 and due to some reason, secondary is now active. Once the primary is back, with the preemptive checked, primary is still passive. 

 

Can someone please assist why primary is still passive?

 

Note: pls

...

Global Protect issue with Windown server 10

The issue is that when I connected to a server through Global Protect, I can't connect to another server.
I have to disconnect from Global Protect and then connect to the desired server. So basically he can connect to one server at a time.

However, wit

...

Resolved! PA-2020 Update PAN OS 7.1.11 possible?

Good morning,

we have a PA-2020 with sw-version: 7.1.11

Can I update the software version to latest PAN OS?

We want to use SAML 2.0.

is there a way to achieve this?

 

kind regards,

Roland

 

warten mit Login admin / admin show system environmentals ----Thermal...

Number of chassis

We've been using Minemeld hosted on AutoFocus and now I stood up a new instance based on the docker hub image paloaltonetworks/minemeld/latest. There is a difference in the "# of chassis" shown on the system dashboard - 2 for the AF hosted Minemeld a

...

Krum by L0 Member
  • 1502 Views
  • 0 replies
  • 0 Likes
  • 24022 Posts
  • 99 Subscriptions
Top Solution Authors
Top Liked Authors