General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Split tunneling issue for office 365 applications

Recently enabled split tunneling for our Global protect VPN, and have added some domains into the split tunnel.
 
For some users domain split tunneling doesn't work.
 
The domains configured to be included in the split tunnel are as follows
 
*autologon.mi
...

Resolved! Upgrading heavily used PaloAlto Firewalls

Hi,

 

I am about upgrade some PaloAlto firewalls with 10s of Vsys but wondering what would be a good report to generate to identify traffic flows for pre and post checks as well as identifying impact to services.

 

any help will be appreciated.

 

Regards,

 

qasim02 by L2 Linker
  • 4296 Views
  • 6 replies
  • 0 Likes

Resolved! GlobalProtect Max tunnel count ?

Hi

I'm doing a global protection test.

And we created the External Gateway and the Internal Gateway.

And for the Internal Gateway, we didn't set up the Tunnel.

If so, wouldn't it count to the Globalprotect Max tunnel provided by the equipment?

In case of

...

Error while checking Dynamic Updates on Panorama 10.0.1

Hi, 

 

Panorama can reach out internet but when checking the updates we are getting a message says "Error while trying to read upgrade info. Please try again later". I did follow https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g00000

...

Ludolfo by L1 Bithead
  • 2387 Views
  • 1 replies
  • 0 Likes

Use URL filtering and Regional blocks

We block Regions at the moment, so traffic going to Russian IPs are dropped. But lets say that I now need to allow a specific URL to be allowed to Russia. If I make a rule above our block rule that has a custom URL category associated with it and def

...

Resolved! Can't find user for security policy rule

Having a bit of an issue but can't seem to pinpoint the solution..   When I go to add a security policy rule, under user, i cannot find specific users.   However, when I go to the traffic monitor tab, I can see the user mapping is working from the Us

...

MikeC by L3 Networker
  • 3487 Views
  • 4 replies
  • 0 Likes

Resolved! No serial no or Auth Code on VM

Hello All,

 

I want to create support account to license my palo alto vm.

 

But while registering it is asking for Device Serial no or Auth Code and Sales Order no or Customer ID, wheareas i dont have any of these. My PA VM does not show serial no. Snap

...

SSL inbound inspection not working for SMTP

I'm running PANOS 10.0.2

SSL inbound inspection for a web server is working but for a seperate SMTP server it is not.

Both use the same certificate.

Both use the same cipher suites.

Two seperate decryption rules wihich are clones of each other, only the

...

Han.Valk by L2 Linker
  • 2393 Views
  • 1 replies
  • 0 Likes

HTTPS to HTTP Redirect

HI Team,

 

Is it possible to redirect the traffic from HTTPS to HTTP.

 

As my webserver is using  HTTP. We outside user connect it's  https://abc.com it's should be redirect to http://abc.com.

 

Please advice

 

Panorama SSO with SAML and Microsoft ADFS

Hello Community,

 

we were trying to connect Panorama 8.1.4 with SAML and as an IDP Microsoft ADFS on Microsoft Server 2012 R2.

 

We tried a lot of configuration and followed the admin-guide, but were unable to get a working authentication.
The auhtd.log

...

Chacko42 by L4 Transporter
  • 3320 Views
  • 1 replies
  • 2 Likes

Resolved! LDAP Rights Query.

Hi Guys,

 

 

To create the service account in AD, which is utilized on the device. we know that below rights are needed.
- Distributed COM Users
- Event Log Readers
- Server Operators

 

My query is why it necessary, what it's justification to be a part of th

...

Resolved! Link down between Firewall and Syslog server

Hi all,

 

I'm looking for any KB or official document that explain the log forwading behavior when link between FW and Syslog server is down.

 

As I understood that PA firewall will not resend the the log at the moment of link between them is down to syl

...

  • 24293 Posts
  • 99 Subscriptions
Top Solution Authors
Top Liked Authors
Labels