General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Thank You for Filling Out the LIVEcommunity Experience Survey!

If you've visited LIVEcommunity anytime recently, you've probably seen a pop-up asking for your feedback. We've deployed this survey since April 2020 for new and returning visitors alike as a way to gather feedback from our users. 

 

In the past six

...

survey-livecommunity.png
jforsythe by Community Team Member
  • 14507 Views
  • 1 replies
  • 4 Likes

Blocking Google Images

Howdy everyone,

 

We have a strict internet usage vlan where users can only hit an Approved List of URLs that we manage through Panorama.  The issue is that some of these fights reference Google as part of the CDNs so we've had to allow them in to the

...

Email Alert Subject Line.

Hi team,

 

Is it possible to customise the Email alert subject line ..??  

For Example : 

Default - Sub: "The VPN XYZ tunnel is down"

Customised - Sub: "The VPN XYZ tunnel is down, Need immediate attention".

Resolved! Palo Alto keep client IP

Hi,

 

Is possible to keep in Palo Alto the client IP although PA is doing a source NAT to reach internet?. A service in the cloud needs to know the client IP. Something like XFF. 

BigPalo by L4 Transporter
  • 1188 Views
  • 1 replies
  • 0 Likes

Resolved! Traffic log shows decrypted for blocked traffic

 

We have not enabled ssl decryption for specific subnets.

When I see the traffic logs I see ssl decrypted is checked and traffic is denied.

 

I verify that I see decrypted flag for all traffic that is blocked in url category.

 

Need to know reason for thi

...

MP18 by Cyber Elite
  • 1353 Views
  • 3 replies
  • 0 Likes

Resolved! PanOS version number

Am I correct that the naming scheme is considered Major Version . Feature Release . Maintenance Release - hotfix?

8.1.6-h3

BoDollis by L2 Linker
  • 2311 Views
  • 2 replies
  • 0 Likes

Packet Descriptors spike

Hi All,

I've been collecting and plotting CPU, Session, Packets Descriptors, Packets Per Second, as well as some other metrics. Once in a while I see a spike on the Packet Descriptor graph.

According to KB article How to Interpret: show running resourc

...

abraun by L1 Bithead
  • 11574 Views
  • 7 replies
  • 0 Likes

Resolved! PA-220 Issues with Routing between LANs (Layer 3)

Hello everyone!

 

I am brand new to Palo Altos and firewalls in general, so I'm sure I have made a couple obvious mistakes, but hope to learn.  I have inherited a PA-220 that is now needed to be put in place between us and other connections (no interne

...

PlanFirewall.PNG
Druke by L1 Bithead
  • 5775 Views
  • 6 replies
  • 0 Likes

GlobalProtect - How Are you Using?

We have had our Palo 3020 along with GlobalProtect for about a year now, and we continue to struggle with all sorts of GP issues. I'm curious to know how are you all using GlobalProtect?

 

One Issue - Our strategy was to use GlobalProtect as an Always-

...

SSL Certificate expiration date monitoring options

Hi guys,

We have external CA certificate for global protect VPN which we want to monitor for its expiration date so that we can get it renewed we in advance to avoid any outage. can anyone pls suggest how can we achieve it. 

 

thanks in advance!!

Top Liked Authors