This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Solution for "SSL decryption bypass for Anydesk"

Hello, I am being asked a lot about why is Anydesk getting a "decrypt-error" end reason when SSL Decryption is active.Here is a simple explanation and how to overcome this. What you usually going to do with this kind of errors is creating a Decryption bypass rule for Anydesk (in this example)Since is it impossible to bypass based on application,...

OZamir by • L1 Bithead
  • 47108 Views
  • 32 replies
  • 7 Likes

Resolved! Browser not prompting/selecting client cert for GP portal

Does anyone know exactly what is needed for browser to either select or prompt for client certificae when connecting to GP portal?I know you need a client sert in personal user store and certificate profile on GP portal. But still i find the behaviour very random.I have 3 GP portals with self signed CA. And a few test machines.For 1st portal get...

santonic by • L6 Presenter
  • 6814 Views
  • 7 replies
  • 0 Likes

Kerberos error

Recently we have down the one of our DC server. Since after we are getting Kerberos error. Please share solution to fix this.

Where i find NGFW-Engineer Exam Information

I can't find information about this NGFW-Engineer exam on the official site. And yes, how to prepare for this exam, with which practice tests can I prepare for this exam? I have consulted many certified people and they have mentioned many sources.

XML API Results for Custom Report Not Matching Data From Panorama GUI

Hello, I am attempting to use the XML API for Panorama to capture the output of a report. I am able to successfully pass the custom report name to the API and get some results, but the results are missing the Source User field outlined in the report definition in the Pano. For example, the report definition (and the emailed report, when it ...

Blocking Torrent/P2P Connections using app ID.

Hi Palo Alto Community, I hope everyone’s having a great day! We’re working to enhance our network’s security by blocking torrent and other risky P2P communications. I’ve set up a deny policy using the “bittorrent” and “bittorrent‑sync” App‑IDs, but I noticed these require the “web‑browsing” App‑ID to function. When I include “web‑browsing” in...

SJayathunge_0-1754938027865.png

Resolved! GlobalProtect with Active/Active HA

I'm having a hard time finding much, if any, documentation on this scenario. I've tried a couple ways of doing it and they work, but I'm trying to figure out what the best way to do it while being as redundant as possible. What I like the best so far is to have the portal and a gateway up on a floating IP so it can bounce from one firewall to t...

GlobalProtect on HA

We get SSL connect select error: 0(Resource temporarily unavailable), time left: 0P26083-T33415 08/07/2025 00:31:33:272 Debug( 468): SSL connect failedP26083-T33415 08/07/2025 00:31:33:272 Debug( 66): detailed SSL error info:P26083-T33415 08/07/2025 00:31:33:272 Debug( 956): connect() failedP26083-T33415 08/07/2025 00:31:33:272 Debug(3388): Conn...

gabe_0-1754592974792.png
gabe by • L1 Bithead
  • 1096 Views
  • 1 replies
  • 0 Likes

Resolved! Pushed template to Palo and now unable to SSH or HTTPS to device

Migrating a firewall and pushed a cloned and modified template to a new Palo alto. Did not push device group. Now I am unable to ssh, ping, https the device. I am on the device by console. Everything with the management interface looks on and I can ping the management default gateway from the Palo. What could be causing this?

M.Allen by • L1 Bithead
  • 1708 Views
  • 2 replies
  • 0 Likes

Resolved! Warning certificate chain not correctly formed in certificate

Hello All I have imported a cerfificate into the PA as a PFX. I have also import the intermediate certs and root CA. The cert is signed by Go Daddy with 2 intermediate certs and a Root CA. All imports fine, but when I get up global protect portal and use the imported cert (from the pfx) I get an error which says "Warning certificate chain not co...

live.png

Resolved! Multi Vsys query.

When managing a multi-vsys firewall, is the correct way to map each vsys to a unique Device Group? Lets say I have vsys_prod and vsys_dev, I would do: Device Group "prod_device_group" mapped to "vsys_prod" Device Group "dev_device_group" mapped to "vsys_dev" The reason for my confusion. I can see that Panorama allows me to add multiple vsys'...

Resolved! LDAP Authentication works when testing it via SSH command but fails on web interface

Hi When I'm running "test authentication authentication-profile "'LDAP Auth Profile" username myldapUser password" on the ssh cli, it authenticates successfully. however when i try to log in on the web interface of global protect, i get this on the webui log: failed authentication for user 'myDomain\myldapUser'. Reason: Invalid username/passwor...

gabe by • L1 Bithead
  • 2086 Views
  • 2 replies
  • 0 Likes
  • 24470 Posts
  • 125 Subscriptions
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks