General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Fan Alarm

Hello,

 

I have an issue with PA-5220 FAN  the LED indicator is red.

 

 

when I check the system environmental logs below is the result:-

 

 

Do I need to change the FAN or any troubleshooting steps for this?

 

 

 

Jafar_Hussain_0-1586715542848.png
Jafar_Hussain_1-1586715650296.png

community version of MineMeld.

I am new to MineMeld time and the first day.   I have only download and install MineMeld on a VM and configured it successfully. I don't know what AutoFocus is, so I don't think I am using it. so I am using the community version of MindMeld. 

In foll

...

WillieW by L0 Member
  • 1353 Views
  • 0 replies
  • 0 Likes

Resolved! Showing Active Debugs

Hi All,

 

 

I come from a Cisco background and now getting to play with PAs  I have a few queries around debugging from CLI.

 

Can we debug multiple different protocols at the same time, e.g Phase 1, 2 for VPNs, maybe some ARP resolution at the same time

...

GlobalProtect with machine cert

Hi,

I'm having a challenge with GlobalProtect when trying to do ldap authentication with a machine cert (from internal MS pki).  I've tried both the computer and workstation authentication template, but neither worked.  GlobalProtect states certificat

...

ce1028 by L4 Transporter
  • 4554 Views
  • 6 replies
  • 0 Likes

Resolved! PAN self-cleanup

Does all the partitions showing below has self cleaning Capabilities or there is a need to manually clear those files like for eg I know old downloaded software can be deleted to free some space from  panrepo partition?

 

Filesystem Size Used Avail Use

...

Resolved! Want detach Gateway from Panorama

Hello team,

 

We have around 10 HA cluster managed through Panorama. now we need to detach/remove one HA cluster from it. Please guide me on the steps to be followed without creating any impact on production.

 

Also please confirm if it need downtime.

 

 

BK0007 by L2 Linker
  • 3010 Views
  • 4 replies
  • 0 Likes

Panorama M-100 Hardware vs installing in ESXi

Hey Everyone,

My company is looking at implementing Panorama to update and monitor the other firewalls we have at other locations.  Does anyone recommend the Hardware like the M-100 over just installing it on a server using ESXi?  

 

Thank you!

Resolved! GlobalProtect - Cannot connect to local gpd service

Hi there!

 

I have a little problem with GlobalProtect and I don't know how to solve it..
I use Ubuntu 18.04
Each command to globalprotect (for example globalprotect help OR globalprotect connect) returns the answer:
Cannot connect to local gpd service.

...

ogoili by L0 Member
  • 42590 Views
  • 3 replies
  • 0 Likes

2X of PA820 Active/ Passive Design question

Hi All

 

After some advice, planning to have 2 X PA820 pairs of Active/ Passives, Inner and outer firewalls protecting some internal networks.

 

See the diagram, Does the HA2 link pass data plane traffic at all?  Or can it?

 

There could be a scenario that

...

Capture.JPG

Global Protect Policy enforcement

Hi All ,

 

I have an issue

 

Is there a way to use Global Protect to  enforce web or URL  filtering policies when users are not on the corporate LAN ?  for now, when users work remotely , they bypass all web and  URL filtering and security policies and d

...

Remove HA config from template of managed firewall pair

Hi,

i have a pair of active-standby firewalls, managed by Panorama. My first attempt, when i imported those to panorama, i pushed one template to both firewalls and had issue with HA IPs, causing split brain.

I recovered the firewalls and later importe

...

josggf by L2 Linker
  • 3406 Views
  • 3 replies
  • 0 Likes

Resolved! PAN-OS 9.0.6 API Curl JSON output

I'm working on a project to get information from the Palo Altos and use it for an input to a SIEM.  I'm able to run the below and get XML output.

curl -k 'https://<PAN>/api/?type=op&cmd=<show><system><info></info></system></show>&key=<KEY>'

I would pre

...

jwhughes by L1 Bithead
  • 5855 Views
  • 10 replies
  • 0 Likes

Resolved! core file crash info

 

show system files show

 

 

-rw-r--r-- 1 root root 653 Dec 2 18:54 all_pktproc_34_8.0.9_37.pcap
-rw-rw-rw- 1 root root 30K Dec 2 18:55 all_pktproc_34_8.0.9_37.info

 

how can i know why system crashed?

 

will this crash any outage to MP or data plane?

MP18 by Cyber Elite
  • 8178 Views
  • 5 replies
  • 0 Likes