General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Verify pdf report sent via email scheduler

We have configured email scheduler to send reports in pdf format.I'm able to receive the email. But attachment is missing.I can see from system logs that the files are created and email is sent.How can I verify whether the PDF report was attached to the email when it was released from firewall. Model - PA-820PAN-OS - 10.0.5

Paloalto don t send log correctly to logstash

Hi evrey one,I'am new to Paloalto and I have a problem with the threath log. I am currently using ELK stack to store and visualize all log from paloalto. When I send the traffic log to logstash there is no problem (there are all field explained in the documentation), but when i send the threat log all the field explained in the documentation are...

Betorov by • L0 Member
  • 2961 Views
  • 1 replies
  • 0 Likes

Global protect not working

Hi Team, We have faced our GP not working 26/07/2021 around 09:15 pm. After the firewall restarts its started to work. When I analyzing TSF I got the ssl vpn below error. "The PID for this process changed indicating it was restarted" 2021-07-26 21:17:33.573 +0530 --- processesTotal num processes: 39Name PID CPU% FDs Open Virt Mem Res+Swap Statep...

VishnuPS by • L3 Networker
  • 3428 Views
  • 3 replies
  • 0 Likes

New 5220 non-functional state

New HA 5220 active-active and non-functional status.HA-1 and HA-2 cable attachedSet up box boxes direct mode and then created templates via PanoramaPanorama doesn't display to parameters defined in direct config statusHow to ensure configs are dumped into template correctly

Default MTU of 1496B in interfaces of VM platforms?

Dear community! We have couple of VMs deployed in MS hyper-v and I realized that all interfaces have a MTU of 1496 bytes even though no value was configured. Checked this with "show interface XXXX" command Shouldn´t the interfaces have MTU of 1500 bytes if no value is assigned or for VMs the MTU is different? Kind Regards!

Carracido by • L4 Transporter
  • 3322 Views
  • 1 replies
  • 0 Likes

Simple policy not working?

Outbound communication to the following IP addresses must be allowed:- 64.58.49.24- 64.58.49.25- 64.58.49.26- 64.58.49.28- 64.58.51.56- 64.58.51.57- 64.58.51.58 text router will attempt to communicate with the above IP addresses over the following protocols and ports:- UDP 500- UDP 4500- IP Protocol 50 for ESP- ICMP SourceRule I have set up is Z...

Resolved! Internet video UDP-range - STUN?

Our HR uses Interview from Indeed https://interviews.indeed.com/demo/video/I've tried to open firewall ports with application STUN, service ANY.But that did not work (error message because of missing "network connection").For testing I've opened all ports for my user, that worked. So I knew it's the firewall.I've ended up with trial and error.At...

ChrisCon by • L2 Linker
  • 4901 Views
  • 2 replies
  • 0 Likes

PA will not update malware signature from sample malware files (http://wildfire.paloaltonetworks.com/publicapi/test/apk)

the customer want to test pa wilfire feature .my test step:1: from http://wildfire.paloaltonetworks.com/publicapi/test/apk, download the sample malware.the traffice throught the pa2: when we can find the wildire log from firewall and theck the log report ,know the malware files sha256------------------------------------------------log: 33, ...

Felixcao by • L3 Networker
  • 3984 Views
  • 4 replies
  • 0 Likes

Security Policy Rule application and service configuration

Hi All, I have an issue where, Panorama had some security policy rules that had the below configuration on them: “Any” is listed in combination with specific ports under services in a given rule“application-default” is listed in combination with specific ports under services in a given ruleThe Panorama was then upgraded from 9.0.11 to 9.1.0 and ...

Ben-Price by • L4 Transporter
  • 2832 Views
  • 2 replies
  • 0 Likes

MS Update application being recognized as ssl

Hi ExpertsI'm looking for an assistance where ms-update is being recognized as ssl and getting denied. We've allowed the web-browsing and ssl to allow the dependency applications as well on the same rule. Port is being identified as TCP/8531 but the application is marked as ssl. Firewalls are running 9.1.6Any suggestions please. Thanks in advance.

Palo Alto SSH Vulnerabilities

Hi Team, We are finding the below vulnerabilities being detected on Palo Alto Management SSH service : CVE-2007-2768CVE-2004-1653CVE-2007-2243CVE-2016-2183 Kindly help us in resolving the above said vulnerabilities. Devices are running with the OS 8.0.16. Regards,Sethupathi M

DropBox - Most of traffic showing up as just web-browsing app-id?

Anyone else seeing an issue where DropBox traffic is mostly being identified as web-browsing? I had an existing rule that was permitting dropbox-base and dropbox-downloading and it recently stopped working. I see all my traffic being decrypted fine. and this is via the web browser, not the dropbox client. Running 9.1.7 with latest app-id content...

jgardner150_0-1627504918524.png

Resolved! Slow o365 downloads

Just deployed HA 3020s in APAC and users are complaining that downloading office 2016 is painful, slow and eventually times out. Having a hard time figuring out why though, logs in PA don't show anything dropping or getting denied and data filtering is set to alert. This wasn't an issue prior when using ASAs and the only change was moving from ...

drewdown by • L4 Transporter
  • 16209 Views
  • 9 replies
  • 0 Likes
  • 24479 Posts
  • 125 Subscriptions
Top Solution Authors
Labels