This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

How could I using Global Protect with Google Authenticator?

Greetings everyone,Is there anyone trying Global Protect with Google Authenticator using OTP features?In past, i tried Duo Security for Two-Factor features, that need Proxy Server to connect PA and Microsoft Active Directory with RADIUS authentication protocol.Now i could implement OTP feature using Google Authenticator, but there's no any post ...

VPN on palovm deployed on Azure

Hi Team, We have palovm on azure cloud and we want to create s2s vpn between off-prem palovm which is deployed on azure and on-prem fortigate firewall. I tried to search document publicly but unable to find any resource. So please help me to provide some docs to create the same. For your reference : regards,Shiv

ShivShankarBhagat_0-1630091402932.png

User-ID ignored user list not being respected

Hello,We leverage a deployment software at our organization and when a computer is having software deployed or is being scanned for inventory by this software a service account does a network logon to create a temp service to run the process. This process generates a logon event on our domain controllers and maps the IP of the device being scann...

why firewall drop server hello message

network flow Lan Network -->Firewall A----->switch -->-Firewall B ---->Internet-------->Database server We are facing issue to connect database server from our lan network.We took packet capture on Firewall A and firewall B .When we initiate traffic from LAN network to database server:Firewall B ; We are getting client Hello and s...

bit_byte by • L2 Linker
  • 6749 Views
  • 5 replies
  • 0 Likes

allow website with non standard port

i have to allow a specific website with non standard port , but already have policy allowed "any" services . still the cannot open the page and incomplete app type in the traffic

amna02rs by • L0 Member
  • 2599 Views
  • 2 replies
  • 0 Likes

Firewall integration

Hello,There was a question about integrating a firewall with third-party sandboxes to send files for review, such as cuckoosandbox or checkpoint, is there such an opportunity and where can I find documentation or information about similar experiences?they say asianpussy is the tastiest and most beautiful sounding. you can check it out by looking...

nirucise by • L0 Member
  • 2044 Views
  • 1 replies
  • 0 Likes

EDL blocking URL

We have a feed for ELD in Palo Alto. We realised that we add this URL (https://unrealengine.com) this web is been blocked properly, but not "https://unrealengine.com/en-US/donwload.For example, www.unrealengine.com. The URL part does not block the URI part either, only if you add it as a domain (without the URI part), it blocks effectively. it c...

BigPalo by • L4 Transporter
  • 4039 Views
  • 3 replies
  • 0 Likes

Resolved! User authentication - Global Protect

HI.I'm pre-staging a couple of PA2020's (active/passive), and am having an issue with getting authentication via AD working for Global Protect through Active Directory.As far as I can tell, the LDAP configuration is correct - the firewall connects to the agent, and gets a list of users from the groups I have configured to be allowed - but every ...

darren_g by • L4 Transporter
  • 36683 Views
  • 12 replies
  • 0 Likes

Resolved! Global Protect client disconnects every 5 minutes for 1 minute

GP client disconnects from VPN every 5 minutes for about 60 seconds.During the disconnection the is no connectivity to internal resources (Chenking pings for example). Internet connectivity is OK during the disconnection.The issue is related to internet connection (User / Laptop works fine on another location.)After 60 seconds the client detect...

ET by • L3 Networker
  • 17148 Views
  • 3 replies
  • 0 Likes

URL geting block

Guys, I have been issued with one of my clients not accessing the URL after adding the URL in the URL category and keeping them the alert.I check the URL traffic the traffic block by real estate and the website category client want is also real estate but I added all possible URL in URL category add into url profile keep the real estate block st...

PA-3220 | SW10.0.5 | Slow Login

Hello Dears, I hope you are doing okay, I have PA-3220 with OS 10.0.5 with GlobalProtect Agent 5.2.6, i am facing a very very slow log in to GUI that takes sometimes 5 minutes to log in whether from internal or external through VPN. Any suggestion what is the reason behind that ?!!! Best Regards,

Youkii by • L0 Member
  • 4747 Views
  • 4 replies
  • 0 Likes

Resolved! difference zone between end users and domain controller on Palo alto

Hello all, I have a problem with palo alto PA-850. I configure domain controllers and end users diference zone. example: zone name: Server for domain controllers, and zone: User for end users. I setup policy to allow all traffic from Zone: Server to Zone: User and from User to Server. but end users could not authenticate with domain controllers....

Chivas by • L2 Linker
  • 5592 Views
  • 6 replies
  • 0 Likes

Resolved! SSH timeouts across the board or per policy?

Are the application timeouts across the board for something like SSH? Meaning for user SSH connections through the PAN and admin SSH connections to the PAN that application controls the timeouts for both?

drewdown by • L4 Transporter
  • 5316 Views
  • 2 replies
  • 0 Likes

Not able to add app;ication in PBF rule

Hey guys my client want some applications traffic to go through ISP2 when I create a PBF rule for that add application I get some specific error.I updated the apps and threat the latest version. PA-220 .PANOS version is 9.1.8

  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks