This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

UnAuthorized Access

Dear, Anyone can help me to solve my account. " Your account has expired. To get this resolved, you must reach out with your Super User for assistance.You can click here to send your Super User a reminder notification." i have clicked to send a reminder notification but nothing happen Thanks you so much for your help

Congdoan by • L0 Member
  • 888 Views
  • 1 replies
  • 0 Likes

HTTP Header Referrer

Hi,is it possible to build a security access rule based on http-header referrer field?Someone have do it?Regards

mmcastr by • L1 Bithead
  • 5933 Views
  • 3 replies
  • 0 Likes

BGP Communities Import Rule

I have a BGP connection that is up. Let's say it is to peer 10.1.2.3, and my Peer AS is 1234 They have a community set that I want to match on in an import rule. Specifically, 1234:567 I know this is just an example, but the field simply says: "Community Regular Expression:" and does not provide me any examples how to configure it. I c...

birkhojk by • L2 Linker
  • 1265 Views
  • 1 replies
  • 0 Likes

Paloalto routing an IPSEC tunnel to another router

Hello, I'm trying to create a tunnel between R1 (OpnSense) and R3 (Sophos), R2 is the Paloalto that NATs a dedicated wan IP to interface1/2 (private TRUST LAN) where is locally connected the Sophos. R1 (Opnsense) <-----> R2 (Paloalto NAT 1:1) <-----> R3 (Sophos) I have setup all the IPSEC IKE2 tunnels on R1 and R3, on R2 i did ...

alexcoxie_0-1750750937204.png
alexcoxie_1-1750751072579.png
alexcoxie_2-1750751152487.png
alexcoxie_3-1750751174390.png

Automated backups from Panorama

Hi Guys I have a HA FW Palo Alto, which are managed by a PANORAMA. Is it possible to do the automated task, to send a BACKUP of the FW configuration, on a daily basis, but from the PANORAMA? The best option in this scenario, in your experience, is to send the backups from the same FW? Or is it better to do the configuration only from the PANORAM...

Matlu_NN by • L2 Linker
  • 1374 Views
  • 2 replies
  • 0 Likes

Wildfire submission log issue

Hello Team, I am navigating through the wildfire submission logs but I cannt download the file or submit verdict request chage. why that? I have full control as administrator, any ideas? TIA

Resolved! Authentication with PA440 using Microsoft 365 Entra ID

We are in the cloud with Azure GCC High environment and have no on prem AD. We are searching to see if there is a way to set up our PA440 to authenticate for a VPN using the user accounts on Entra ID in M365? Does anyone have any experience with this? Thanks,

B.Vance by • L1 Bithead
  • 2046 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama Management of Remote HA PAN Pairs over a VPN

I have Panorama at our central site to manage PANs. I have several HA Pairs (PA-220 devices) that are remote and connect to Panoram via a VPN. Currently on the remote PAN HA pairs, Panorama can only fully manage the primary PAN. The secondary PAN of the HA pair is not reachable via Panorama. I can sync the config from the primary PAN to the se...

duckboy by • L0 Member
  • 6189 Views
  • 4 replies
  • 0 Likes

Queries on IPv6 to IPv4 Conversion

Can anyone answer and provide the clarification on to the below queries. Does Palo Alto support IPv6-to-IPv4 NAT without a DNS64 server? 2. Does Palo Alto support /128 IPv6 addresses in NAT?

Filter Certain Search Strings using URL Filtering stopped working

We set up a custom URL category proxy-search following the instruction here https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Filter-Certain-Search-Strings-using-URL-Filtering/ta-p/52441This worked fine but recently it has stopped working. Students can now type the search words we block on the list in Google and they can search ...

Bootp

We have discovered a few bootp devices which are unable to get an ip - looks like unsupported with Palo. Anyone have come across this issue and have a suggested work around?

clewis1 by • L3 Networker
  • 3031 Views
  • 1 replies
  • 0 Likes

Resolved! XML API for Global Search

Hi All,I am trying to test XML API for global search . I am trying to use for search security rule with given description . ANy help for this.

Resolved! Can this OID notificate the expired certificates for SSL decryption and Global Protect?

Hi, I found the below OID in SNMP Trap.Can this OID notificate the expired certificates for SSL decryption and Global Protect? https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HBfzCAG ====panCryptoCertExpiryTrap .1.3.6.1.4.1.25461.2.1.3.2.0.100 Certificate expired==== Best regards,MasaW

MasaW by • L2 Linker
  • 1541 Views
  • 1 replies
  • 0 Likes
  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks