This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

User-ID ignored user list not being respected

Hello,We leverage a deployment software at our organization and when a computer is having software deployed or is being scanned for inventory by this software a service account does a network logon to create a temp service to run the process. This process generates a logon event on our domain controllers and maps the IP of the device being scann...

why firewall drop server hello message

network flow Lan Network -->Firewall A----->switch -->-Firewall B ---->Internet-------->Database server We are facing issue to connect database server from our lan network.We took packet capture on Firewall A and firewall B .When we initiate traffic from LAN network to database server:Firewall B ; We are getting client Hello and s...

bit_byte by • L2 Linker
  • 6882 Views
  • 5 replies
  • 0 Likes

allow website with non standard port

i have to allow a specific website with non standard port , but already have policy allowed "any" services . still the cannot open the page and incomplete app type in the traffic

amna02rs by • L0 Member
  • 2639 Views
  • 2 replies
  • 0 Likes

Firewall integration

Hello,There was a question about integrating a firewall with third-party sandboxes to send files for review, such as cuckoosandbox or checkpoint, is there such an opportunity and where can I find documentation or information about similar experiences?they say asianpussy is the tastiest and most beautiful sounding. you can check it out by looking...

nirucise by • L0 Member
  • 2082 Views
  • 1 replies
  • 0 Likes

EDL blocking URL

We have a feed for ELD in Palo Alto. We realised that we add this URL (https://unrealengine.com) this web is been blocked properly, but not "https://unrealengine.com/en-US/donwload.For example, www.unrealengine.com. The URL part does not block the URI part either, only if you add it as a domain (without the URI part), it blocks effectively. it c...

BigPalo by • L4 Transporter
  • 4138 Views
  • 3 replies
  • 0 Likes

Resolved! User authentication - Global Protect

HI.I'm pre-staging a couple of PA2020's (active/passive), and am having an issue with getting authentication via AD working for Global Protect through Active Directory.As far as I can tell, the LDAP configuration is correct - the firewall connects to the agent, and gets a list of users from the groups I have configured to be allowed - but every ...

darren_g by • L4 Transporter
  • 37582 Views
  • 12 replies
  • 0 Likes

Resolved! Global Protect client disconnects every 5 minutes for 1 minute

GP client disconnects from VPN every 5 minutes for about 60 seconds.During the disconnection the is no connectivity to internal resources (Chenking pings for example). Internet connectivity is OK during the disconnection.The issue is related to internet connection (User / Laptop works fine on another location.)After 60 seconds the client detect...

ET by • L3 Networker
  • 17339 Views
  • 3 replies
  • 0 Likes

URL geting block

Guys, I have been issued with one of my clients not accessing the URL after adding the URL in the URL category and keeping them the alert.I check the URL traffic the traffic block by real estate and the website category client want is also real estate but I added all possible URL in URL category add into url profile keep the real estate block st...

PA-3220 | SW10.0.5 | Slow Login

Hello Dears, I hope you are doing okay, I have PA-3220 with OS 10.0.5 with GlobalProtect Agent 5.2.6, i am facing a very very slow log in to GUI that takes sometimes 5 minutes to log in whether from internal or external through VPN. Any suggestion what is the reason behind that ?!!! Best Regards,

Youkii by • L0 Member
  • 4866 Views
  • 4 replies
  • 0 Likes

Resolved! difference zone between end users and domain controller on Palo alto

Hello all, I have a problem with palo alto PA-850. I configure domain controllers and end users diference zone. example: zone name: Server for domain controllers, and zone: User for end users. I setup policy to allow all traffic from Zone: Server to Zone: User and from User to Server. but end users could not authenticate with domain controllers....

Chivas by • L2 Linker
  • 5719 Views
  • 6 replies
  • 0 Likes

Resolved! SSH timeouts across the board or per policy?

Are the application timeouts across the board for something like SSH? Meaning for user SSH connections through the PAN and admin SSH connections to the PAN that application controls the timeouts for both?

drewdown by • L4 Transporter
  • 5413 Views
  • 2 replies
  • 0 Likes

Not able to add app;ication in PBF rule

Hey guys my client want some applications traffic to go through ISP2 when I create a PBF rule for that add application I get some specific error.I updated the apps and threat the latest version. PA-220 .PANOS version is 9.1.8

Resolved! Why a forced Target Negate No?

I've had a case open with Palo Alto support for over a month and the person I got says they've not seen this issue before. I doubt we are blazing new trails here and I just don't understand how this can actually be unfamiliar.Our Palo Alto is a recent install of a converted configuration from a different firewall platform. The implementation ven...

BobNida by • L0 Member
  • 6856 Views
  • 3 replies
  • 0 Likes

Resolved! Issues with VPN to AWS

Hi I appreciate this is an odd one but I have a little bit of an issue with my home setup, I have a pa-220 behind a sky router, the issue is that if I am coming from the inside network i.e mgmt interface that traverses the inside zone to make it out then I can ping anything I want, however if I am trying to source the ping from the external inte...

  • 24454 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks