General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4106 Views
  • 0 replies
  • 0 Likes

SSL Decryption and www.apple.com

We are testing SSL decryption and are finding that Macs are getting a certificate warning page when visiting https://www.apple.com. The warning says "This website may be impersonating "www.apple.com" to steal your personal or financial information". These Macs do trust our Root CA, so it's not that. I put "www.apple.com" in the SSL Decryption...

jambulo by L4 Transporter
  • 4252 Views
  • 1 replies
  • 0 Likes

Able to see other peoples traffic on Comcast

Is there anyone else that has Comcast Fiber circuits that is able to see other people's traffic on the public interface?We have been POC'ing the DNS Security License on several FW's once we turned it on we are seeing a large amount of DNS Tunneling alerts coming into XDR. When we investigate they are coming from the Untrust network on the defa...

PanOS 7.0.7 - Commit failed

Good day, I have an HA pair on PanOS 7.0.7 (it will be upgraded soon). Someone did a small oopsies and upgraded the apps and threats to the latest not realizing that PanOS 7.0.7 can't handle the 4 digit names I tried reverting back to the one that was previously installed. But when I press "commit", I get the following error Result: FailedDetail...

RayLim by L0 Member
  • 2578 Views
  • 2 replies
  • 0 Likes

Resolved! Palo Alto BGP with AWS Transit Gateway.

Team,We have a BGP neighbor on our Palo Alto with a Transit Gateway in the AWS. This BGP is formed from our Site A to the AWS TGW. Now, we want to form another BGP from our Site B to the AWS TGW. Site A should be preferred always and we know we can do that using the AS-path-prepends.However, one additional requirement is that both the sites sho...

nson2139 by L3 Networker
  • 3921 Views
  • 1 replies
  • 0 Likes

Unable to open Scheduled report received on mail

We are not able to open daily scheduled report which is receving on mail.For some day report is opening successfully, but for another report is unable to open. The issue is occuring intermittently.The pdf reader is unable to open file showing unsupported file format or file is showing corrupted. Please find firewall and PANOS detailsVM-300PANOS ...

Issue accesing RDP - losing connectivity

Hi, I have a strange issue. Im connected using GlobalProtect. For example, i have a ping working to 10.0.8.137. I also open a rdp to the same IP and i start losing the ping. Its like i lose privileges when i open RDP. It occurs for the rest of IPs not only where i open RDP. Here the logs:

Monitor.JPG
BigPalo by L4 Transporter
  • 3313 Views
  • 3 replies
  • 0 Likes

Commit Error

We're getting the following commit error on our PA-820 device:Error: Number of addresses, dynamic groups, external-ip-lists, external-predefined-ip-lists and predefined ip-block-lists (2547) exceeds platform capacity (2500)

Ayesha by L0 Member
  • 3987 Views
  • 2 replies
  • 0 Likes

Viewing Unused Address Objects

Hello fellow engineers! I'm in the process of a firewall audit in my environment and I've got a lot of address objects configured. I'd like to trim the list down and get rid of addresses that are no longer valid (as in haven't been used in over a year). Is something like this possible? I saw this link about a Perl Script, but it doesn't seem pr...

Resolved! Tech Support file guide

Hi All, Does PAN offer a basic guide to troubleshooting using the tech support file e.g. which logs show what information etc?

Ben-Price by L4 Transporter
  • 16428 Views
  • 6 replies
  • 0 Likes

Resolved! Several Terminal Servers User-ID

Hi,We are implementing User ID.We have around 5 machines where we have Windows based user id agents installed and running smoothly.Now we have around 150 terminal servers - including windows server editions, jumphosts etc. - where multiple users can login at the same time. So: 1) Do we have to deploy TS Agent for user identification on all these...

  • 24332 Posts
  • 124 Subscriptions
Top Solution Authors
Labels