This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

DHCP Lease Issue

Device details: Model - PA 3020 Software version - PAN OS – 8.1.3 Problem Description: Please be informed that we are frequently encounter DHCP lease full (100%), and it cause interruption for our users at region side. Customer side have two vlan for DHCP lease which are vlan.960 (IP pool of XX.XX.XXX.X to XX.XX.XXX.XXX) and vlan.959(XX....

GlobalProtect - Multiple Client Settings

Following a change to move from LDAP (Local Domain Controllers) to Azure SAML with MFA enabled we are experiencing an issue with the use of multiple Client Settings Configs on a single Gateway. We use the users section to identify a subset of users that only require RFC1918 IP ranges to traverse the VPN and all remaining users will hit the sec...

PT1559 by • L0 Member
  • 2009 Views
  • 3 replies
  • 0 Likes

UnAuthorized Access

Dear, Anyone can help me to solve my account. " Your account has expired. To get this resolved, you must reach out with your Super User for assistance.You can click here to send your Super User a reminder notification." i have clicked to send a reminder notification but nothing happen Thanks you so much for your help

Congdoan by • L0 Member
  • 867 Views
  • 1 replies
  • 0 Likes

HTTP Header Referrer

Hi,is it possible to build a security access rule based on http-header referrer field?Someone have do it?Regards

mmcastr by • L1 Bithead
  • 5894 Views
  • 3 replies
  • 0 Likes

BGP Communities Import Rule

I have a BGP connection that is up. Let's say it is to peer 10.1.2.3, and my Peer AS is 1234 They have a community set that I want to match on in an import rule. Specifically, 1234:567 I know this is just an example, but the field simply says: "Community Regular Expression:" and does not provide me any examples how to configure it. I c...

birkhojk by • L2 Linker
  • 1219 Views
  • 1 replies
  • 0 Likes

Paloalto routing an IPSEC tunnel to another router

Hello, I'm trying to create a tunnel between R1 (OpnSense) and R3 (Sophos), R2 is the Paloalto that NATs a dedicated wan IP to interface1/2 (private TRUST LAN) where is locally connected the Sophos. R1 (Opnsense) <-----> R2 (Paloalto NAT 1:1) <-----> R3 (Sophos) I have setup all the IPSEC IKE2 tunnels on R1 and R3, on R2 i did ...

alexcoxie_0-1750750937204.png
alexcoxie_1-1750751072579.png
alexcoxie_2-1750751152487.png
alexcoxie_3-1750751174390.png

Automated backups from Panorama

Hi Guys I have a HA FW Palo Alto, which are managed by a PANORAMA. Is it possible to do the automated task, to send a BACKUP of the FW configuration, on a daily basis, but from the PANORAMA? The best option in this scenario, in your experience, is to send the backups from the same FW? Or is it better to do the configuration only from the PANORAM...

Matlu_NN by • L2 Linker
  • 1317 Views
  • 2 replies
  • 0 Likes

Wildfire submission log issue

Hello Team, I am navigating through the wildfire submission logs but I cannt download the file or submit verdict request chage. why that? I have full control as administrator, any ideas? TIA

Resolved! Authentication with PA440 using Microsoft 365 Entra ID

We are in the cloud with Azure GCC High environment and have no on prem AD. We are searching to see if there is a way to set up our PA440 to authenticate for a VPN using the user accounts on Entra ID in M365? Does anyone have any experience with this? Thanks,

B.Vance by • L1 Bithead
  • 2000 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama Management of Remote HA PAN Pairs over a VPN

I have Panorama at our central site to manage PANs. I have several HA Pairs (PA-220 devices) that are remote and connect to Panoram via a VPN. Currently on the remote PAN HA pairs, Panorama can only fully manage the primary PAN. The secondary PAN of the HA pair is not reachable via Panorama. I can sync the config from the primary PAN to the se...

duckboy by • L0 Member
  • 6135 Views
  • 4 replies
  • 0 Likes

Queries on IPv6 to IPv4 Conversion

Can anyone answer and provide the clarification on to the below queries. Does Palo Alto support IPv6-to-IPv4 NAT without a DNS64 server? 2. Does Palo Alto support /128 IPv6 addresses in NAT?

Filter Certain Search Strings using URL Filtering stopped working

We set up a custom URL category proxy-search following the instruction here https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Filter-Certain-Search-Strings-using-URL-Filtering/ta-p/52441This worked fine but recently it has stopped working. Students can now type the search words we block on the list in Google and they can search ...

  • 24412 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks