General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! What is file file descriptor?

Hi.

I have a problem with management serves, sometimes when I try to connect to firewall by SSH I can see message "Cannot connect to management server". Process restarts itselft and connection to mgmtsrvr return, mgmtsrvr return to normal resource uti

...

mateuszg by L1 Bithead
  • 2348 Views
  • 1 replies
  • 0 Likes

PA-220 - 9.1.6 - DO NOT UPDATE

Hi guys,

 

We have had 3 PA-220's recently that have all failed and needed to be factory reset when upgrading to 9.1.6. I have a case open to investigate further but this version is still the recommended version which is worrying. 

 

Luke

LukeRath by L1 Bithead
  • 4742 Views
  • 8 replies
  • 0 Likes

Panorama custom reports hang

Custom reports on my Panorama (9.1.6) were working fine until this week. Today, any report i run gets stuck in "please wait" indefinitely. Nothing has changed on the machine. Any ideas what i should look for?

Resolved! Local user Identification issue

As per the below mention snap-shot, we observed user id get changed with AD user and we have allowed the internet access to local user id which is configured in Palo Alto. Due to issue user facing internet issue.

 

We have not configure this user in AD

...

Capture Local user Identification issue.JPG

Resolved! Schedule cli command execute

Hi all,

 

I need schedule some cli command which i execute manually from SSH console like below;

 

Command line 1: test vpn ipsec-sa tunnel Xtunnelname:XtunnelProxyId

Command line 2: test vpn ike-sa gateway Xtunnelname

 

Is there any way schedule tasks in p

...

Lacrymae by L1 Bithead
  • 3102 Views
  • 2 replies
  • 1 Likes

changing AD user passwords through globalprotect app

Hi Community,

 

I have the following scenario:

user_1/password_1 Active Directory credentials for login into windows system and domain

user_2/password_2 Active Directory credentials only for globalprotect authentication.

 

I´d like to know if there is a wa

...

Carracido by L3 Networker
  • 1637 Views
  • 1 replies
  • 0 Likes

Resolved! PAN 5050 DDNS

Hello Team,

 

I moved up from Fortinet/Ubiquity, bought a used PAN 5050 and upgrade the OS to 8.1.18 for a Home Use. However, since i am new to PAN during the configuration i realized PAN 5050 does not support DDNS. In my case i am home user I don't ha

...

KurdTech by L1 Bithead
  • 2453 Views
  • 3 replies
  • 0 Likes

Taxii Server

Is Minemeld suitable to be a taxii server? Can setup the output to send to taxii clients? Any steps for guidance pls

lemonade by L0 Member
  • 1363 Views
  • 0 replies
  • 0 Likes

EDL URL List Format and Subpages

I understand that for an EDL of type URL, the format is either 

 

company.com

*.company.com

 

This will include any additional subdomains, whether at the beginning or the end of the URL. 

 

Regarding the forward slash, will a URL like the following be a val

...

Captive Portal for Corporate devices

We have recently upgraded our HA firewall cluster (PA-3020) from 7.1.22 to 9.1.6 following the suggested upgrade path by PA.

We have captive portal in place, before the upgrade, all our corporate windows 10 laptops as soon as we power them on, they us

...

UHL by L0 Member
  • 2188 Views
  • 3 replies
  • 0 Likes

Minemeld MISP miner needs a revisit

Hi guys,

 

I believe the MISP miner for Minemeld needs a re-visit. None of the tagged indicators are being pulled by Minemeld from our MISP instance. I think there are a lot of changes to the current API as compared to the ones used by the current mine

...

vedd3r by L2 Linker
  • 2393 Views
  • 1 replies
  • 1 Likes

Resolved! Logging for deny/drop policy

Hi Team,

 

what is the recommended/ best practice logging option for policies with action set as deny/drop? is it "log at session end" or "log at session start"?

  

Query on file blocking profile.

Hi,

 

Can we achieve the following points,

 

1.Required only our office  domain user can able to access upload/download file
2.Hotmail user can only access for downloading / uploading block
3.Another domain user (Guest user) only downloading the file uploa

...

  • 24034 Posts
  • 102 Subscriptions
Top Liked Authors
Labels