General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! User Group Count exceeds threshold - PANORAMA

Hi Folks, looking for advice on an alert which is bugging me.

 

Our Panorama instance regularly (2 per hour) reports that:

Panorama - SYSTEM ALERT : high : User Group count of 12080 exceeds threshold of 10000

 

Now this is correct - as it comes from two (

...

GN_ROS by L1 Bithead
  • 4929 Views
  • 8 replies
  • 0 Likes

Resolved! GP disconnect intermittely

Hi All,

 

The users are able to connect and work for sometime and then traffic flow stops; although Global Protect Agent shows that VPN is connected.

The user have to disconnect and reconnect again, then it will work for sometime and stops again.

 

This i

...

STIX - minemeld.ft.taxii2.Taxii2Client

Connecting Minemeld to a new STIX/TAXII server running STIX 2.1. Receiving error getting api_root. received error 405. Using the minemeld.ft.taxii2.Taxii2Client prototype. Not sure what the API root is or how to retrieve it. Any thoughts? Have a coup

...

inrsys by L1 Bithead
  • 1690 Views
  • 0 replies
  • 0 Likes

Resolved! UserID Active Directory multiple VSYS

Hello people, 

I have a novice question so apologies if it is too obvious to some. 

I have created 5 vsys and I want to use the same Active Directory server in all 5 vsys (vsys A, B, C, D,E) for userid in policies. 

 

The Active Directory is only routabl

...

Jedi_D by L2 Linker
  • 2381 Views
  • 3 replies
  • 0 Likes

citrix web browser application dependency

I have 2 pa 850 . devices was not able to install antivirus update due to application dependencies on web browser. our citrix servers are not set up for web browing due to security concern. is their any other solution available. our pa configuration

...

kushalsh by L0 Member
  • 1655 Views
  • 1 replies
  • 0 Likes

Resolved! What is file file descriptor?

Hi.

I have a problem with management serves, sometimes when I try to connect to firewall by SSH I can see message "Cannot connect to management server". Process restarts itselft and connection to mgmtsrvr return, mgmtsrvr return to normal resource uti

...

mateuszg by L1 Bithead
  • 2377 Views
  • 1 replies
  • 0 Likes

PA-220 - 9.1.6 - DO NOT UPDATE

Hi guys,

 

We have had 3 PA-220's recently that have all failed and needed to be factory reset when upgrading to 9.1.6. I have a case open to investigate further but this version is still the recommended version which is worrying. 

 

Luke

LukeRath by L1 Bithead
  • 4820 Views
  • 8 replies
  • 0 Likes

Panorama custom reports hang

Custom reports on my Panorama (9.1.6) were working fine until this week. Today, any report i run gets stuck in "please wait" indefinitely. Nothing has changed on the machine. Any ideas what i should look for?

Resolved! Local user Identification issue

As per the below mention snap-shot, we observed user id get changed with AD user and we have allowed the internet access to local user id which is configured in Palo Alto. Due to issue user facing internet issue.

 

We have not configure this user in AD

...

Capture Local user Identification issue.JPG

Resolved! Schedule cli command execute

Hi all,

 

I need schedule some cli command which i execute manually from SSH console like below;

 

Command line 1: test vpn ipsec-sa tunnel Xtunnelname:XtunnelProxyId

Command line 2: test vpn ike-sa gateway Xtunnelname

 

Is there any way schedule tasks in p

...

Lacrymae by L1 Bithead
  • 3163 Views
  • 2 replies
  • 1 Likes
  • 23716 Posts
  • 104 Subscriptions
Top Solution Authors
Top Liked Authors
Labels