General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

GlobalProtect opening Windows VPN settings

My company recently set up GlobalProtect to have us work from home. It works for everyone but myself. When I installed the app, it installed through the Microsoft App Store. When I try to run GlobalProtect, all it does is open a popup window with a l

...

globalprotect1.png
Pbourque by L0 Member
  • 2554 Views
  • 3 replies
  • 0 Likes

app-id question you-tube

Hi

 

can somebody tell me the difference between 

youtube-base

youtube-streaming 

 

will later only ever be there video stream.

 

Looking to add it to GP 

thanks

 

Which logs will capture the new VPN admin creation?

Hi Team,

 

We need to capture new VPN administrator creation at our LogRhythm SIEM end. We wanted to know in which log will we get that information.

 

For Example, for login and logout we get logs in the below ones:

GlobalProtect gateway user login succee
...

GlobalProtect: Port 4501 UDP

Hi all,

 

I understand that GlobalProtect uses TCP 443 and UDP 4501... But what is there any more information available about GlobalProtects usage of port 4501?  All I could find is the following:

 

  • TCP/443 for the SSL communication
  • UDP/4501 for tunne
...

Resolved! Global Protect Portal/Gateway Public IP Question

Good Afternoon Everyone,

 

This may be somewhere else so if i'm asking something that has already been asked, please point me to it. I am trying to set up a new vpn tunnel on a public IP from my block assigned by my ISP. I only have one interface going

...

Problems with GlobalProtect from China?

Hi,

 

  we have a user who spends a lot of time in China, but is having major problems getting GlobalProtect working while there.  Does anyone else have any experience running GlobalProtect out of China (to Norway, in our case), either positive or nega

...

hklygre by L1 Bithead
  • 7573 Views
  • 6 replies
  • 0 Likes

Resolved! GP Gateway commit error.

Hi,,

 

Even after i configured to "Retrieve Framed-IP-Address attribute from authentication server" Why am i still getting IP pool range commit failure ??

 

Please find below screenshots.

 

Commit ErrorConfig Setting

error_.png
config_detail.png

Add config to cluster managed by panorama

Hi,

 

we have to add SNMP profile traps config to cluster PA. This cluster is managed by panorama and have the most of the config done in panorama. So we are thinking to add this snmp traps new config directly in the FW, so it would any issue is we app

...

BigPalo by L4 Transporter
  • 1252 Views
  • 1 replies
  • 0 Likes

cli scripting mode without strict check

Hi,

  sometimes you have set cli config that you want to paste in CLI mode but in some occasions 

order of the commands is not correct. For example something like below. For the following

to work address object must be above the group otherwise you will

...

Brute force not triggered

Hi,

 

I would like to stop (block) an ip when there are a number of failed logon attempts but I cant get it to work. The vulnurability signatures are not being triggered. The other day someone tried over 400 different user names against out owa. 6 trie

...

mgusta by L2 Linker
  • 1178 Views
  • 0 replies
  • 0 Likes

Minemeld faild to fetch CSVs

we are using PaloAlto to get CSV from :

https://d13206e4.paloaltonetworks-app.com/feeds/AF-Malware-Hashes?v=csv&f=confidence&f=sources|Name&f=indicator|malware_hash
https://d13206e4.paloaltonetworks-app.com/feeds/AF-Malware-Mutex?v=csv&f=confidence&f

...

Minemeld - Unable to Connect Miner to Processor

Please pardon my knowledge and experience with Minemeld.  A support Engineer forwarded me an interesting related project & Covid19 data.

 

https://github.com/tyson312/minemeld-covid-feeds

 

I setup a default Minemeld install and added the files from

...

url.PNG
Eric2020 by L0 Member
  • 1155 Views
  • 0 replies
  • 0 Likes

SSL Decryption

We are doing SSL decryption in another Vsys for the traffic published over the internet based on SSL. We need to know if the high utilization is due to that SSL decryption happening in another Vsys ? as we are planning to move this SSL decryption set

...