General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1197 Views
  • 0 replies
  • 0 Likes

SAML Captive Portal

Hi All,

i'm trying to configure a SAML authentication for captive portal but when i'm trying to export metadata and selecting captivel portal i'm not able to export, it shows no option:

if I try to type an address and click ok the file generated contai

...

HygorPeixoto_0-1607522196574.png

Resolved! dhcp client class-id setting

Dear all,

a potential FTTH provider requires a special option for the dhcp client in order to work.

CISCO setting like:

ip dhcp client class-id 100008,0001,Cisco,e02f.6d21.xxxx,15.3(1)T,FCZXXXXXXXX


Is there any change to set the dhcp class-id for the dhc

...

Resolved! want to know options to disable GP connection

Temporary we want to disable test GP setup. Found below options :

* Create deny rule for GP public ip.

or

* remove fqdn/ip of external gateway from GP Portal > Agent

or

Disable Tunnel mode , GP gateway > Agent > Tunnel Settings > Tunnel Mode

 

Is there any

...

Deepak25 by L3 Networker
  • 3175 Views
  • 3 replies
  • 0 Likes

Resolved! Recommended Pan-OS version

I have a 5220 that I am using as core L3 segmentation router for my 500 user environment. Currently running 9.1.3 Pan-OS and  What version of PAN-OS is recommended for this scenario. Is it generally advised to install the latest version posted on dev

...

PaloAlto TAC support has gone missing

Opened a S2 (high) ticket at 11am ET this morning about panorama in High Availability in suspended mode after upgrading from 9.1.9 to 9.1.10.  No response from TAC support after two hours.  I called in and have been waiting for over an hour with no o

...

dtran by L4 Transporter
  • 5766 Views
  • 9 replies
  • 0 Likes

Java Cert error due to decryption?

My organization is in the process of moving from one VPN solution to GlobalProtect. We are seeing several applications being unable to run certain features, or run successfully at all, and the error logs appear similar to this (I say similar because

...

How to allow policy destination by URL

Hello,

 

I need know how to allow create policy in PA firewall 3020 and add destination as URL name as (microsoft office 365) instead of adding all IP ranges.

 

Appreciate your help

 

Thanks

mmarie by L1 Bithead
  • 11279 Views
  • 3 replies
  • 0 Likes

global protect vpn with DUAL ISP

Hi Team,

 

we have two isp link with ecmp load-balancing enabled. we only have one virtual router setup. we have configured GP vpn portal with one isp interface and how can i configure the GP vpn with second isp link as well. we would like to have two

...

Global Protect Enforcement Bypass

Hi All,

 

I understand that this is a Microsoft related matter however I'm interested to see if anyone else has come across this issue.

 

With Global Protect Network Enforcement in place (through the Portal Config), it is still possible for local admins

...

Josh990 by L2 Linker
  • 7459 Views
  • 5 replies
  • 0 Likes

Configuration checks against CIS security benchmarks

Hello All, Do any of you compare local firewall or Panorama configurations against CIS benchmarks for security compliance checks ?

Either using an existing tool to check Firewall compliance with the CIS (Centre for Internet Security benchmarks) recomm

...

User-ID Agent 8.1 help needed

Hello.

 

AD integration using the User-ID agent.  We were on 8.0.7-2 and things were working fine.

 

I tried upgrading to version 8.1.0-66 and had several problems with wrong user-id being reported.  I saw in the release notes for 8.1:

• Since multiple us

...

dannon by L3 Networker
  • 5857 Views
  • 5 replies
  • 0 Likes

GlobalProtect issue with Enforcer Network Access

Hello,

 

We enabled a week ago the feature enforce network access on our environment.

We are using internal host resolution to detect if user is inside or outside corporate network.

In a random way, we're experiencing issue with users worldwide. We have

...

  • 24172 Posts
  • 117 Subscriptions
Top Solution Authors
Top Liked Authors
Labels