General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 2837 Views
  • 0 replies
  • 0 Likes

Resolved! Static Bi-Directional NAT translation

Hi,

 

Is it possible to have 2 static bi-directional NAT rules configured for the same public IP address e.g. mapping one public IP address to 2 internal servers using the below linked config?

 

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/n

...

Ben-Price by L4 Transporter
  • 3290 Views
  • 2 replies
  • 0 Likes

Internal host detection not Working

I have an external Gateway and I wish to setup always-on except when on local LAN. As a test i am doing this on my own username but it seems to always want to connect to external GW regardless of my settings.

 

I have turned on Internal Host detection

...

welly_59 by L3 Networker
  • 11314 Views
  • 11 replies
  • 0 Likes

User-Mapping Server Monitoring

Hi All,

 

Wanted to know the Best Practice for the User-Mapping with Server Monitoring, we have a few Firewall Sites which utilize the server monitoring feature whereas the vast majority others do not and use only windows User-ID agents for probing and

...

Dear Palo Alto Networks:

Your firewalls are generally okay.

But, the fact that you cannot get an interface bandwidth graph without configuring some QoS hack to only show an ingress interface traffic graph is stupid.

Every firewall vendor in the world has this feature. Except y

...

getting traffic after the interface is down

Hey guys hope you doing well I got a question I get a challenge one of my user getting traffic logs of NetBIOS by source Pvt IP from LAN to WAN the device from the source side is down the 2 Pvt IP still hitting the cleanup rule. The Policy is denied

...

Disable new apps in content update

Hi Experts,

 

We've a pair of firewalls (9.1.6) managed by the Panorama (9.1.6). We've Threat prevention license in place and client would like to install just the threats and not the apps by selecting disable the new apps in content update.

As recommen

...

TAC support has gone missing, again :-(

Opened a S2 TAC case @7pm ET 07/21/2021.  The SLA response time is 2 hours.  TAC didn't get back to me until 5:43am ET 07/22/2021.  The response from TAC is very vanilla, not helpful at all.

 

Call back to TAC this morning has been waiting for an hour

...

dtran by L4 Transporter
  • 3611 Views
  • 4 replies
  • 0 Likes

Resolved! Destination NAT Error

Hello All,

 

Doing an destination Nat but getting below Error. Could anyone please help me. Also pls find below my nat rule

 

 

 

Please note : Ethernet 1/1 is my Outside Interface

 

vishal_07_2-1627031851196.png
vishal_07_3-1627032032760.png
vishal_07_4-1627032054212.png

Exception Handling in Palo Alto Support Page 7/22/2021

Hello Palo Alto Team,

I would like to bring this up with you.

I noticed that your support page went down today 7/22/2021 and that is fine. What worries me is the way your system handles exception. I think you are exposing to much that end user like m

...

NAT SDWAN

Hello,

My Name is Dwi.

 

I have case with SD-WAN configuration.

I have 2 ISP DIA provider, and i want to combine 2 ISP provider in to single logical SD-WAN for Load Balancing Internet Traffic.

the Palo Alto device is under NAT, please help me to configure

...

dwinur by L0 Member
  • 4301 Views
  • 3 replies
  • 0 Likes

Using GlobalProtect , ExpressVPN and Remote desktop

Dear All,

 

I am pondering following scenarios:

 

1- I connect to Server "S" using GlobalProtect on my Computer "A". Now Assume i do not have access to computer "A" physically because i have moved to another city. I want to access computer "A" from anoth

...

shaukafa by L0 Member
  • 4286 Views
  • 1 replies
  • 0 Likes

Resolved! Always On Global Protect VPN

When I am looking at GP Gateway Users I see some USERs with
ID prelogin and others where USER matches the COMPUTER name
field. Any idea why I might see one or the other? I am using certificate
authentication.

 

 

MichaelMedwid_0-1626972848253.png
  • 24278 Posts
  • 120 Subscriptions
Top Solution Authors
Top Liked Authors
Labels