This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

PA500 upgrade to PA460

Hi Team, I need to upgrade my PA500 to new box PA460. PANOS software matrix says there is no way you can upgrade PA500 to any version newer than 8.1 nor you can downgrade PA460 to anything older than 10.1 which makes the process a bit tricky for me. The question is what's the best way to migrate my configuration? Is the config different between ...

Retention showing 0 days for hourly , daily and weekly summary logs

At A location PA VM500 firewall summary logs not showing for traffic , threat and URL logs. Retention period is showing for 0 days.We haven't made any changes in log quota. Same setting is there at B location vm500 firewall and in that firewall retention period is more than 100 days. Both VM firewall have same capacity disk, but no summary log...

Deepak25 by • L3 Networker
  • 2176 Views
  • 1 replies
  • 0 Likes

Palo Alto interface does not ping after a certain period of time

We are running NMS.However, the operation method does not work internally and goes out to the VPN public IP.trust -> untrust -> isp(internet outside) -> VPN untrustCommunication is done in the same way as above. In NMS, the status of VPN untrust is monitored by ICMP.However, after 30 minutes, the VPN untrust interface suddenly stops pin...

Way to fix a half activated VM-Series?

Fresh install of a VM-Series, 9.0.11. I didn't manually allocate RAM, so it was running with 5.6G when I activated - get the message, increase RAM then activate again. Shutdown, increase RAM to 10GB. Boot - firewall is now in a weird state where all the licenses are present except capacity, and it shows serial number as unknown.Should I start ...

S2S VPN Phase1 down

We have deployed PA-VM in Azure. We are setting up S2S VPN with Cisco Router. PA-VM is the initiator.All the P1 and P2 param are matching but Status for both are showing red.System logs show: 'IKE phase-1 negotiation is failed. Couldn\'t find configuration for IKE phase-1 request for peer IP 64.39.99.153[500].' I do NOT have any 64.x.x.x IP conf...

Sys Log.PNG

BGP filter route only for /32 prefix

Hi Experts, My question is, my Cisco switches advertise host routes to FW from many VLANs/VRFs together with other network routes, we want the firewall Not to accept the any routes with subnet mask /32 but accept anything else, can you help to see if the firewall can do this kind of route mapping? Which can be easily achieved in Cisco router by ...

rahul.k by • L0 Member
  • 5552 Views
  • 1 replies
  • 0 Likes

Agentless User-ID agent permissions

We are attempting to use the agentless User-ID setup with the understanding that the service account needed to be a member of the following AD groups: Distributed COM Users, Event Log Readers, and Server Operators. However, after reading the following Palo Alto documentation on how to create the service account it seems that there is some confli...

Dynamic Address Group with Azure monitoring

https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-azure/vm-monitoring-on-azure/set-up-vm-monitoring-on-azure.html In the end article tells to create DAG but how do I add VM's automatically to this group. Is there a wildcard that i can use like 'azure.vm-name.*'. I tried but its not working. Al...

raji_toor by • L4 Transporter
  • 5598 Views
  • 2 replies
  • 0 Likes

System log message Clearing snmpd.log due to log overflow

I am wondering why I see the log 'Clearing snmpd.log due to log overflow' on several of my firewalls. Out of the ~20 firewalls I manage 2 or 3 firewalls log this message on occasion. The other firewalls never log this message. I am trying to understand why this occurs on just a few firewalls. Should I be concerned about the message? What do I lo...

SNMP and Netflow

PAN 9.1.8 has SNMP V3 configured base onhttps://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHOCA0with Netflow on AE5.30, ae5.50, and ae5.60 of the 5260 base on https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/monitoring/netflow-monitoring/configure-netflow-exports.html#id4ad7a523-e577-41ab-8b77-4034458a2a7b On m...

arhong by • L1 Bithead
  • 4837 Views
  • 5 replies
  • 0 Likes

Content filtering for MAC OSx

I am trying to finalize my content filtering for our PA 820 rollout. I have the user-ID, group mapping and content filtering rules (By group) working just fine for my windows PC's. Where I am stuck is trying to figure it out for all of our MAC OSx users. None of our MAC's are joined to our domain and I am not sure about adding them at this time....

RussMc by • L1 Bithead
  • 3283 Views
  • 2 replies
  • 0 Likes

Resolved! PA Packet Capture Data Storage Location (CLI)

I’m trying to figure out how to view the data location of an in progress packet capture in the CLI. I’m aware of the current packet size in the GUI, but I would like to see where the data is logged in the CLI along with the current available storage remaining.

IsaiahF by • L1 Bithead
  • 4575 Views
  • 2 replies
  • 0 Likes

OSPF stopped gracefully restarted

Hi Team, We are facing issue with OSPF is not working properly over the firewall as per the configuration part seems fine we checked with the below given document.https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm5ZCAS All the configuration for HA is configured as per above given document.We checked with the configurati...

OSPF issue.jpg
  • 24479 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks