This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! IKE Error

In my system logs I'm seeing the following error: "IKE phase 1 negotiation is failed. Couldn’t find configuration for IKE phase-1 request for peer IP x.x.x.226[500]." The bizarre thing is that the tunnel IS working despite this error!!! The reason for the error appears to be that the IP address listed "x.x.x.226" is the wrong IP address! It sho...

Can we use SFP+ with PA-820?

Hi, Guys. I plan to use the PA-820.The PA-820 has only two HA ports.I am planning to substitute the HA ports with SFP ports.Can I use the PAN-SFP-PLUS-CU-5M with the PA-820?The PAN-SFP-PLUS-CU-5M is cheaper than the PAN-SFP-CG, so I would like to use the PAN-SFP-PLUS-CU-5M if it is available.I would appreciate it if you could tell me. I am a b...

Lisa_35 by • L0 Member
  • 3095 Views
  • 1 replies
  • 0 Likes

Palo Alto IPV6 configuration for firewalls running in active-active HA

Hello All, We have a customer planning to enable IPV6 firewalling in their current data center firewalls. The firewalls are currently running in active-active HA mode. I have the below queries. 1. When I configure IPV6 address on the interfaces, is there any possibility that the HA will break or it will have flaps?.2. When I configure floating ...

shabeeb by • L1 Bithead
  • 3820 Views
  • 4 replies
  • 0 Likes

antivirus not able to update

we have recently renew our license of thread prevention . As application and threats are update but the antivirus is not update from Palo alto server. We downloads the AV from support portal and manually install in FW and run this command still antivirus is not able to update. Please suggest. 2021-01-19 13:10:30.791 +0500 Error: pan_get_curren...

Joshan_Lakhani_1-1611061626483.png
Joshan_Lakhani_2-1611061703048.png

Properly routing IPv6 across site-to-site IPSEC tunnel

Configuration: I have two /56 IPv6 prefixes, one which is used in our Bay Area office, and one which is unused. I have taken a /64 from the unused /56 prefix and assigned it for use by our office in The Netherlands. They will use DHCP to assign the addresses to a small set of workstations that need to send IPv6 traffic across our site-to-site tu...

Resolved! Log interface configuration under PA FW

Hi folks, We have PA 7050 firewall chassis and after upgrade to version 9.1.11, we got a sync HA issue, the TAC told us that it's mandatory to configure the log card interface. So we created a log interface to resolve the issue, the sync HA issue was resolved but the log traffic is no more sent to the syslog server. TAC told us that the log traf...

URL with port

Hi, Wondering if someone can help me out. I've done some searching and have not come up with with much I have a user who needs to access a few webpages on a custom port. The link for example is something like: https://custom1.config.fake:2546/info but there are a few more like https://custom2.config.fake:2546/info , and https://custom3.config.fa...

FW_Newb by • L0 Member
  • 4474 Views
  • 3 replies
  • 0 Likes

Resolved! Transitioning from a physical interface with sub interfaces, to aggregated interface with sub interfaces

Hello Everyone, I have a well developed PA based network, with a single interface and many sub interfaces, trunking to my switches. I need to change this to an aggregated interface, with all the same sub interfaces I currently have.What options do I have to convert everything over from the current interface with TONS of sub interfaces, zones, p...

Adding URLs to an allow category caused some connections to be blocked

We added additional URLs to an existing custom url category and on our URL filtering profile, it is set to alert. These additional URLs are completely unrelated to the connection that started to fail. And as soon as we reverted those changes things began working just as they had before. We checked the URL filtering logs and nothing was being blo...

bafergel_1-1635279938830.png
bafergel_2-1635279998851.png
bafergel by • L2 Linker
  • 3521 Views
  • 3 replies
  • 0 Likes

User-ID - one user occasionally not hitting the user based policy

PAN-OS 8.1.2, User-ID configured with Windows AD single domain. There are security rules built, based on users/user groups. It is mostly working as intended, but specifically there's [at least] one user that has a different behavior - some user-based (not group) rules are occasionally missing, even through they did hit the policy a few moments a...

nikoo by • L3 Networker
  • 14330 Views
  • 12 replies
  • 0 Likes

need to block .lockbit extension

as per RBI guideline ,one of our customer from banking sector wants to block .lockbit file type extension,but in firewall i didn't found any such extension.

KashifSh by • L1 Bithead
  • 3303 Views
  • 4 replies
  • 0 Likes

Issue with the vulnerability logs.

We have noticed some vulnerability logs in our PA for the Telerik application in our environment.the threat vault id is 59014 but according to the link. https://threatvault.paloaltonetworks.com/?query=59014). https://www.telerik.com/support/kb/aspnet-ajax/details/allows-javascriptserializer-deserialization To fix this vulnerability we need to ...

Jafar_Hussain_0-1635255328006.jpeg

How do I select an asset when filing a support case?

Hi, Weird question, but I'm trying to make a support case for a firewall, and I'm on Step 4, where it's asking me to "Please select the asset for which you are filing the case." No matter where I click in the table, there doesn't appear to be any way to actually select something. This is both on Firefox and Chrome.Scrolling to the right doesn't ...

Steven16_0-1630423910623.png
Steven16_1-1630423990111.png
Steven16 by • L0 Member
  • 2522 Views
  • 2 replies
  • 0 Likes
  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks