This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Captive portal problem

Hello,I have configured the Captive portal but i am not able to open the web page.PAN-OS version- 9.0.9Below is my configuration:-1 - LDAP authentication2 - Configured interface management profile with the check response page.3 - enabled user identification.4 - configured authentication policy.5 - Apply forward proxy decryption. After some troub...

how to integrate paloalto firewall with Cortex XSOAR

Hi, I have setup Cortex XSOAR. However, i'm still confuse what i can do with this platform.. Someone said, i can integrate my Paloalto Firewall with Cortex XSOAR... Is there anyone here, know how to integrate my Palo alto firewall with Cortex XSOAR?

HA configuration back to a Cisco Nexus switch, question about port-channels

Our current environment has two PA-850s connecting to two Cisco Nexus switches. Each PA-850 has a fiber connection to each Nexus. The Nexus has a configuration of a single port-channel covering all four fiber links. Is this how it should be done, or should I have a port-channel for PA-3220 (1) and another port-channel for PA-3220 (2)? Current...

Resolved! Is Panoroma(all model, vm) logging disk use RAID technology

Hi All,I am curious to know which technology is using in Panoroma logging disk to store the logs or disaster recovery. I have added 6TB virtual disk in panoroma now it is showing DiskA, DiskB, DiskC,DiskD, DiskE. If any one Disk get faulty how data will get from the faulty disk.

Resolved! Question about moving traffic to new rule

Hello Palo Alto Community, I have a question regarding moving https traffic off a rule to another existing rule. The traffic being moved is critical to operations and cannot be disrupted. For this reason I've been asked to confirm the behaviour of this change. I don't see any issues with proceeding however would like to confirm the impact. My th...

PA_User by • L0 Member
  • 2800 Views
  • 2 replies
  • 0 Likes

Impact on Processing rulebase order

Hi,Is there and if so what is the difference on processing speed of a PA rulebase when most hit rules are on top vs when most hit rules are spread throughout the rule base?For example: Imagine a rulebase of 15000 rules. What would be the processing speed difference if a certain rule is hit 10000 times a day if it's on top (say 1th rule in the ru...

General question about firewalls

Hi Guys,I am extreme beginner on firewalls and network. I have a question, which will sound very naive. My brother company has around 500 employees in the same branch where he works. They have two firewalls in HA and then switches and then their servers. They run many web applications in their servers and a large amount of data is uploaded to th...

Satyam by • L1 Bithead
  • 3284 Views
  • 3 replies
  • 0 Likes

Resolved! Cert renew

I imported the new Cert to Palo . how do I Update the Global protect and SSL/TLS Service profile? Old cert expiring tomorrow.

How to identify high dataplane CPU

Hi Community, Could you please to identify a problem with palo alto device. The device is with processing is too high. What could be causing this consumption? This is normal or is a problem? Data Plane CPU stay always with =100% Follow a message:Management CPU: 81%Data Plane CPU: 100% (It´s problem, stay always = 100%) Thanks a lot for help Ca...

PA VM IPSEC Tunnels in Azure

Ok, I've been stumped for a few days now. I dropped a support call in for help, but they are taking their time...and I am behind schedule. LOL. I have a PA-VM-100. Its sitting in an azure cloud. There is an NSG on the Trust, Web (DMZ), and Mgmt interfaces, and a separate NSG on the Untrust. The IPSEC tunnel is green on both phases 1 and 2. I hav...

ndresang by • L0 Member
  • 2495 Views
  • 1 replies
  • 0 Likes

Limiting users access in palo alto firewall

Hi Team, I have a query where i need to know whether there is any features or configurations needs to be done on simultaneous login by users.Currently its unlimited for users by palo alto firewall. we need to restrict users unlimited access by any means possible.Let me know what are the possibilities. Either by hip profiles or user credential ba...

Not able to upgrade MacOS

Not able to upgrade macOS. We are trying to upgrade macOS from Catalina to Bigsur. Whenever we try to upgrade it from the app store or download the dmg and install, the installer fails.But when it is connected to a different network, it goes through without any problem. I wonder if there is something in firewall that needs to be allowed. Please ...

Akhil_B by • L2 Linker
  • 2950 Views
  • 2 replies
  • 0 Likes

Network Interface configuration into V-Sys Environment

Hi,can anybody help me for below queries:How to make a shared (sub-interface) into multi V-sys environmentHow to create VLAN interface (L2/L3) on specific V-sys.Is there any concept of virtual-switch concept in V-sys environment?How to make a inter V-sys communication.

vijKumar by • L0 Member
  • 2010 Views
  • 1 replies
  • 0 Likes

Easy way to deal with Google SMTP (1e100.net)?

Anybody found an easy way to deal with allowing SMTP traffic to Google but nowhere else. The problem here is 1e100.net IP space is all over the place (since it's Google's world wide distrubted cloud) and FQDN address object type, when it even works [bugs all over the place with that code], doesn't allow wildcares.Really need a day to say someth...

PeterT by • L2 Linker
  • 18898 Views
  • 10 replies
  • 0 Likes
  • 24412 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks