General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4221 Views
  • 0 replies
  • 0 Likes

block web page content

I would like to know, i have hosted one website. once any one open a website the webpage will open. on that page i am getting all the information related to my environment. like domain dns name and dns admin name are disclosed. is there any way to block this. below is the example:-

Jafar_Hussain_0-1628495549821.png

http to https redirect

Dear Team, I want to HTTP to HTTPS redirect.example:- If the user is trying to open wesite - http://abc.com it should be redirected to https://abc.com is this possible in paloalto? Regards,Jafar Hussain

Resolved! Validation Error for device and networks. Commit failed

We have deployed PA-VM (10.1) from Azure marketplace. We are in the process of getting the device registered.It is at its initial config i.e. only created two eth interfaces, 2 nat rules, 1 VR with two static routes and 1 policy allow all.However, we cannot commit this config. Getting error below.We have not used DHCP for the Eth interfaces.Only...

CommitError.PNG
MGMT settings.PNG

Resolved! DevSecOps

Hello,I am attempting to automatically download paloalto products into my software factory. What is available to do this?

Resolved! Phase 2 tunnel is not up

One of my clients configure the site to site tunnel from AWS to Palo alto device the phase 1 is able to up but the second phase is not up it is because we didn't enter the proxy id for or something else i should go for troubleshoot kindly help.

Query on IKEv2 Phase2 parameters

Hello, We are thinking of peering Cisco ISR G2 Router with PA-VM (deployed in Azure).In Cisco, ESP-AES-256 is used for Encryption and ESP-SHA-256 is used for Authentication.I can see that these two options are not available in PA-VM.In that case, what should we select in PA-VM so that we can create a site-to-site tunnel with the Cisco peer? Than...

Is your organization using a DevOps or DevSecOps model?

We could like to know if your organization using a DevOps or DevSecOps model, or are you trying to move to one? What has your experience been so far? Do you like it? Do you hate it? Things we can improve on? Please let us know your thoughts.

jdelio by L7 Applicator
  • 5216 Views
  • 2 replies
  • 2 Likes

How to reimport a csr via api

Anyone ever tried to import a csr back into config? I generated a csr on panorama the other day and then went to generate a certificate. (I did not commit at this time) when I came back with the csr response someone had reverted the config so my csr was goneI now have a config audit entry with some rest API information about the cert car, but ca...

reaper by Cyber Elite
  • 4536 Views
  • 5 replies
  • 0 Likes

What does these vaules in dp brdagent logs mean

2021-08-04 03:08:26.800 +0000 PORT4: board_port_autoneg_enabled -> board_port_autoneg, link: 0, mode: 12021-08-04 03:08:26.856 +0000 Port 1: DISABLE command received2021-08-04 03:08:26.856 +0000 PORT1: board_port_autoneg_enabled -> board_port_reset, link: 1, mode: 12021-08-04 03:08:26.858 +0000 Port 1: Down 1Gb/s-full duplex2021-08-04 03:0...

Palo Alto 10.0.6 5220 and 'show session all filter min-age'

Hello All, Just wondering if 'show session all filter min-age 4000000' displays relevant information. We have around 3200 sessions in session table at average, but when I am trying to look for long-lived or even stuck(?) connections number using command above, it shows me around 200 connections. But if I take one of those 'old' ones number and v...

VPN Site-2-Site both sides with dynamic IP

VPN Site-2-Site both sides with dynamic IP Good afternoon, first of all, thank you very much for your support and help.Is it possible to configure the following: Site 1: Palo Alto with Dynamic output to the Internet.( already have NAT configured on the modem/router/ADSL pointing to the Private WAN IP.Site 2: Palo Alto with Dynamic output to the ...

Metgatz by L4 Transporter
  • 3142 Views
  • 1 replies
  • 0 Likes
  • 24355 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels