General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 439 Views
  • 0 replies
  • 2 Likes

Firewall Palo can advertise aggregate route...

Hello,

 

In our lab, we made a set up about peering BGP between Palo and a third part device.

According to this kb from Palo : "The Palo Alto Networks firewall does not advertise an aggregated route to its peer when it receives a prefix falling within t

...

Palo Dual Action on Same Malicious Domain

We have found in the logs, Malicious DNS queries are being blocked but few of them are in Alert State. however the Domain is marked as a malicious in DNS signature at Threat Vault.

Can you please elaborate why paloalto having dual action on same malic

...

Joshan_Lakhani_0-1610996825658.png

Resolved! Layer 3 Subinterfaces VM-Series Firewalls VLAN 4095

When it comes to vm series firewalls, Layer 3 subinterfaces, trunks and port groups, are there any downsides/catches/cautions to setting the ESXI port group to use vlan 4095 (trunk), and then simply utilize layer 3 subinterfaces on the vmseries firew

...

Sec101 by L4 Transporter
  • 4263 Views
  • 2 replies
  • 0 Likes

PA-220 lab licensing

Hi,

 

I'm looking to purchase a PA-220 lab unit (lab license) for home.  Basically, using it for labbing with my personal internet/internal traffic.  Are there limitations with that device/license,  such as bandwidth limits

ce1028 by L4 Transporter
  • 10574 Views
  • 3 replies
  • 0 Likes

Resolved! Global Protect DHCP Pool utilisation

Hiho,

 

I´d like to know how to see how much ipv4 adresses of the pool are in use or free so I need to know when to enlarge the pool.

That dhcp redirect doesn´t work I unfortunately recognized while searching the forum regarding dhcp and gp.

We are using

...

Read-Only Superuser by Security Zone

Hello, I hope everyone is staying healthy.

 

I work at a company that provides ISP services to public schools, each school district is divided in to separate security zones on our Palo and I am trying to see if a read-only user can be created that is a

...

Resolved! IPSec VPN restarts very often

Hallo,

I have defined a IPSec VPN connection with following params:

ike: 3des/sha1/dh5 Lifetime: 8 hours

ipsec: ESP/3des/sha1/dh5 Lifetime: 30 minutes (life size not set, shows 0MB)

ike gateway: main mode, DP enabled

The connection is established but in s

...

Access Denied on doc links within Live Community

Maybe it's because I'm new here. BUT, every doc link I click on via a post in the Live Community gives me an 'Access Denied. You do not have sufficient privileges for this resource or its parent to perform this action. Click your browser's Back butto

...

DCas by L0 Member
  • 3135 Views
  • 2 replies
  • 0 Likes

Detect ipsec vpn tunnel down with remote palo alto peer

 

 PA5020/PAN-OS 7.1.10

 

 I am trying to develop a NAGIOS check to get an alert , when a vpn tunnel between PA's at different locations

is down. So far I have been looking at the ifup-status of the corresponding tunnel interface at the local firewall. I

...

  • 23700 Posts
  • 110 Subscriptions
Top Solution Authors
Labels