This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

MS Update application being recognized as ssl

Hi ExpertsI'm looking for an assistance where ms-update is being recognized as ssl and getting denied. We've allowed the web-browsing and ssl to allow the dependency applications as well on the same rule. Port is being identified as TCP/8531 but the application is marked as ssl. Firewalls are running 9.1.6Any suggestions please. Thanks in advance.

Palo Alto SSH Vulnerabilities

Hi Team, We are finding the below vulnerabilities being detected on Palo Alto Management SSH service : CVE-2007-2768CVE-2004-1653CVE-2007-2243CVE-2016-2183 Kindly help us in resolving the above said vulnerabilities. Devices are running with the OS 8.0.16. Regards,Sethupathi M

DropBox - Most of traffic showing up as just web-browsing app-id?

Anyone else seeing an issue where DropBox traffic is mostly being identified as web-browsing? I had an existing rule that was permitting dropbox-base and dropbox-downloading and it recently stopped working. I see all my traffic being decrypted fine. and this is via the web browser, not the dropbox client. Running 9.1.7 with latest app-id content...

jgardner150_0-1627504918524.png

Resolved! Slow o365 downloads

Just deployed HA 3020s in APAC and users are complaining that downloading office 2016 is painful, slow and eventually times out. Having a hard time figuring out why though, logs in PA don't show anything dropping or getting denied and data filtering is set to alert. This wasn't an issue prior when using ASAs and the only change was moving from ...

drewdown by • L4 Transporter
  • 15691 Views
  • 9 replies
  • 0 Likes

OSPF passive interfaces question

What is best practice to advertise connected networks on a single VR where you have OSPF running and neighboring on an Internal Firewall interface to router, and want to advertise multiple segmented/firewalled networks directly attached the same firewall?Is it best to mark the segmented networks as Passive ospf interfaces, and allow OSPF to adv...

Sec101 by • L4 Transporter
  • 5353 Views
  • 3 replies
  • 0 Likes

Resolved! QOS_PHYSICALMEMORY_UTILIZATION = 86.63 from Palo Alto Management ip

We are getting below email alert from the firewall management ip 192.168.x.15 QOS_PHYSICALMEMORY_UTILIZATION = 86.63 from source 192.168.x.15 targeting Slot-0 Management Memory has crossed the major static threshold of >85.0 What these alert about? Is there any risk on the firewall? I am not able to find any specific article related to the is...

PankajDhobe_0-1627375254996.png

SSL Decryption: ERR_HTTP2_INADEQUATE_TRANSPORT_SECURITY

Hi paloalto community, we're currently still testing ssl decryption and discovered a new error, which I can't google to find a solution. If we're visiting the following site, we get an "ERR_HTTP2_INADEQUATE_TRANSPORT_SECURITY" error. Site: https://www.1erforum.de/ See attached our configuration and ssl information without decryption enabled. Fir...

2020-01-13 11_42_30-pa-1.png
2020-01-13 11_42_39-pa-1.png
2020-01-13 11_42_56-Anhängerkupplung M240i _ M140i.png
2020-01-13 11_46_30-www.1erforum.de.png
mrkskhn by • L1 Bithead
  • 65382 Views
  • 36 replies
  • 0 Likes

Doubt about multiple SAs in IPSEC tunnel

Hi, We have a tunnel working but looking in the logs we see many installed SAs. So we think it should be a SA for line in proxy ID. So why all these logs about "installed SA"? Any idea?

vpnjs.JPG
BigPalo by • L4 Transporter
  • 2534 Views
  • 1 replies
  • 0 Likes

Newly registered domains - how does PANDB classify them?

I'm not really sure how to title this one but here goes A great many of the links in cryptolocker/zeuss type stuff links to domains that are brand new, yet quite a few of them seem to be in PAN-DB in categories like "Shopping" or "Business and Economy".If I go out tomorrow and register a domain, presumably at that point it's "Unknown".What's the...

PA-500 fan too noisy

Hi, I think one of our PA-500's fan is always running at 100% speed,Because it's too noisy than others, Following is output of environmental, it says RPM is just 1, Does anyone know solution for this problem?\ Thanks,

pa-500 output.png

Resolved! Apps & Threats version 8434-6840 fails to install

Hi I've had 2 separate NGFW's fail to install Apps & Threats DB version 8434-6840 with this message:Error: Application group 'Wifi_Allowed_Apps' member 'visual-studio-live-share-direct' does not existError: This content install has failed because app 'visual-studio-live-share-direct' has been removed in content version 8434-6840. To success...

ShaiW by • L1 Bithead
  • 5134 Views
  • 5 replies
  • 0 Likes

Resolved! Getting GPG error updating

We installed minemeld a year or two ago and have been running apt-get monthly with no issue. Today running apt-get had CRC errors shown below. I looked through this forum but didn't find anything that looked related. Any help would be appreciated. Thanks

CharlesSFG_0-1627405622967.png

TCP Reset being dropped at firewall

I have a client accessing a Citrix CAG via a firewall at one site on HTTP that I see traversing the FW, exist out towards the internal PA firewall reaches its destination. The destination server is sending a TCP RST, we are told to redirect the browser to HTTPS, that TCP reset is sent all the way back to the firewall nearest the client, receive...

Resolved! Multicast issue

AE1.1 is the static RP(10.1.1.1/24) and ae1.1 has 10.1.1.1/24 assigned to it. All the 10.0.0.0/8 routes are served by this sub interface and RP configured on switch is 10.1.1.1AE1.2 hosts the mcast server and AE1.2 has gateway of 172.16.0.1/24.Multicast clients in 10.5.0.0/24 are able to join MCAST streamed on 172.16.0.20 AE1.3 connects to a sep...

multicast.png
raji_toor by • L4 Transporter
  • 3588 Views
  • 1 replies
  • 0 Likes
  • 24381 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks