This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

VPN S2S Site with Dynamic IP and site with FQDN ( DynDNS )

VPN S2S Site with Dynamic IP and site with FQDN ( DynDNS ) Good afternoon, is it possible to set up a Site-to-Site VPN between a site with a dynamic Public IP and a site with a DynDNS FQDN.PaloAlto----IP-Dynamic Public----Internet-VPNIPSEC-----PaloAlto with FQDN ( myvpns2s.dyndns.net ) This configuration is supported ? Thank you for your support...

Metgatz by • L4 Transporter
  • 2855 Views
  • 1 replies
  • 0 Likes

Looking for Palo Alto Networks Certified Network Security Administrator Exam Study Material & Tips For Preparation

Hello, I'm planning to get Palo Alto Networks Certified Network Security Administrator certification. How long will take to prepare for the PCNSA exam as I have little experience of working with the Palo Alto firewall. Where I can get the learning material and a complete study guide? Thanks.

Steven09 by • L0 Member
  • 6616 Views
  • 1 replies
  • 0 Likes

Decryption Log Forwarding

I upgraded to PanOS 10.0.6, and am trying to forward decryption logs via email. If I go to monitor -> decryption, then I see a bunch of rows where zone.src eq untrust and zone.dst eq untrust and ( proxy_type eq GlobalProtect ), application is incomplete, and Policy Name is blank. This is exclusively or almost exclusively from bot or malicio...

GP gateway getting ignored

I have one of the users getting the below error in the PanGPS log ignore gateway gateway.####.com , duration time is 0xFFFFFFFF, priority=1gateway.####.com -1ms This user is located near the mentioned gateway, How to make this work for GP Client not to ignore the gateway.

Sambhu21 by • L1 Bithead
  • 2865 Views
  • 2 replies
  • 0 Likes

SSL Decryption and www.apple.com

We are testing SSL decryption and are finding that Macs are getting a certificate warning page when visiting https://www.apple.com. The warning says "This website may be impersonating "www.apple.com" to steal your personal or financial information". These Macs do trust our Root CA, so it's not that. I put "www.apple.com" in the SSL Decryption...

jambulo by • L4 Transporter
  • 4617 Views
  • 1 replies
  • 0 Likes

Able to see other peoples traffic on Comcast

Is there anyone else that has Comcast Fiber circuits that is able to see other people's traffic on the public interface?We have been POC'ing the DNS Security License on several FW's once we turned it on we are seeing a large amount of DNS Tunneling alerts coming into XDR. When we investigate they are coming from the Untrust network on the defa...

PanOS 7.0.7 - Commit failed

Good day, I have an HA pair on PanOS 7.0.7 (it will be upgraded soon). Someone did a small oopsies and upgraded the apps and threats to the latest not realizing that PanOS 7.0.7 can't handle the 4 digit names I tried reverting back to the one that was previously installed. But when I press "commit", I get the following error Result: FailedDetail...

RayLim by • L0 Member
  • 2725 Views
  • 2 replies
  • 0 Likes

Resolved! Palo Alto BGP with AWS Transit Gateway.

Team,We have a BGP neighbor on our Palo Alto with a Transit Gateway in the AWS. This BGP is formed from our Site A to the AWS TGW. Now, we want to form another BGP from our Site B to the AWS TGW. Site A should be preferred always and we know we can do that using the AS-path-prepends.However, one additional requirement is that both the sites sho...

nson2139 by • L3 Networker
  • 4126 Views
  • 1 replies
  • 0 Likes

Unable to open Scheduled report received on mail

We are not able to open daily scheduled report which is receving on mail.For some day report is opening successfully, but for another report is unable to open. The issue is occuring intermittently.The pdf reader is unable to open file showing unsupported file format or file is showing corrupted. Please find firewall and PANOS detailsVM-300PANOS ...

Issue accesing RDP - losing connectivity

Hi, I have a strange issue. Im connected using GlobalProtect. For example, i have a ping working to 10.0.8.137. I also open a rdp to the same IP and i start losing the ping. Its like i lose privileges when i open RDP. It occurs for the rest of IPs not only where i open RDP. Here the logs:

Monitor.JPG
BigPalo by • L4 Transporter
  • 3584 Views
  • 3 replies
  • 0 Likes

Commit Error

We're getting the following commit error on our PA-820 device:Error: Number of addresses, dynamic groups, external-ip-lists, external-predefined-ip-lists and predefined ip-block-lists (2547) exceeds platform capacity (2500)

Ayesha by • L0 Member
  • 4260 Views
  • 2 replies
  • 0 Likes
  • 24463 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks