This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4468 Views
  • 0 replies
  • 0 Likes

Resolved! File Blocking Profile - Can not block file-transfer over "Wechat-file-transfer" Application

Hi guys,Our customer want to block file over "Wechat-file-transfer" application. I searched on Application then seen "wechat-file-transfer" on Application database. But, I can not search any "wechat..." on application field on "File Blocking Profile" as pics: Can not search "wechat-file-transfer" when create File Blocking profile: How to reso...

ThomasX_0-1622777792737.png
ThomasX_1-1622777812206.png
ThomasX by • L1 Bithead
  • 6991 Views
  • 2 replies
  • 0 Likes

downloads time out

Greetings, i built a new dmz with a short list of apps allowed in (trust) out (untrust) and am having issues with downloads initiated using http(s)seeing the download age out. i have allowed ssl and web-browsing and a few other apps....can anybody help with what i have missed? thanks!-tom

tcsmithh by • L1 Bithead
  • 2752 Views
  • 3 replies
  • 0 Likes

Reporting on Coin Miners

I would like to get a view on what crypto/coin mining activity is going on inside my network but there isn't an application category that covers this - they are just classified as internet-utility and have varying other attrributes. I can't create an application filter that picks them out either, at least not without including google-base or ot...

djr by • L4 Transporter
  • 2233 Views
  • 1 replies
  • 0 Likes

Happening in June: The Complete Zero Trust Network Security Event

Greetings everyone, Don't miss Palo Alto Networks' Complete Zero Trust Network Security event coming up in June. This event will cover the following points related to the newly unveiled Zero Trust Network Security: Secure access to the right applications: The first integrated CASB Secure access for the right users: by using the Cloud Ident...

seattle-launch-live-community-r2b-1100x120.jpg
jdelio by • L7 Applicator
  • 3000 Views
  • 1 replies
  • 4 Likes

Pre-defines application not working ?

Apology for asking multiple question for the past one week.. We've define a policy to allow active-directory-base application which includes most of the AD standard ports, but the traffic is not hitting the policy, eventhough the destination ports are a match. Any reason why ? As a workaround for now, we added new custom service for the policy ...

annielee by • L2 Linker
  • 2213 Views
  • 1 replies
  • 0 Likes

Resolved! Service route and DHCP interface

Hello, We have PA-220 devices that are configured with DHCP interface for Internet access. We need to change the service route config for all update-related trafic (URL, dynamic contents, EDL, ...) since default mgmt interface has no Internet access. However I cannot chose the corresponding interface from the drop-down list. Indeed, the only sel...

Unable to access Google Drive

Hi, Google drive is allowed in Gsuite url category but user is able to access gmail and google calendar but when try to access Google drive and Docs and sheets,it is being blocked by firewall under storage-and-backup category. What is the possible solution for this,Please suggest.

User-ID rule to bypass HIP check not matching.

Hi all, I have a rule to allow certain Global Protect users DNS and RDP traffic by matching the user-id. However, even though it looks like the traffic should match when I view the traffic log it's not?! For some users the rule works fine but others it doesn't match and I can't work it out. Any help would be greatly appreciated 🙂 Kevin.

Resolved! Best/Most Efficient way to view exact URLs

We're currently in the process of moving over from Cisco to Palo and are still trying to work through everything. We currently have a URL profile attached to every policy and the only actions we have on categories are allow and deny. Should we set everything to at least alert so that they would appear in the URL Filtering logs? Is there a wa...

bafergel by • L2 Linker
  • 3928 Views
  • 3 replies
  • 0 Likes

External Dynamic List retrieval on PAN-OS 9.1.2

Hello message board, this is my first post!!!! I am trying to set up a EDL feed from XSOAR into the NGFW for O365 IPv4 addresses. Tested the feed using curl, both locally and remote, and it is working. The issue is fetching the list from within the NGFW. I captured the packets and it shows the NGFW trying to negotiate on TLS1.0. Cortex XSOAR onl...

Source ip region/country showing incorrect on PA firewall

In the Palo alto firewall for the public ip 205.254.183.218 source ip region is showing as US. but user is located at India.we have given access on firewall for source region India only for inbound traffic.In the traffic logs source country is showing as US country.Therefore traffic is going from clean-up rule.what should we troubleshoot for th...

SurajN by • L2 Linker
  • 4549 Views
  • 3 replies
  • 0 Likes

Ubuntu 18.04 install errors

Hi There, Running into issues trying to install on Ubuntu 18.04 During the install process at the end I get this message: TASK [minemeld : requirements] ******************************************************************************************************************************************************************fatal: [127.0.0.1]: FAILE...

bsmith2 by • L1 Bithead
  • 37385 Views
  • 37 replies
  • 0 Likes

Syslog server flapping passive firewall.

I have Syslog configured in my firewall. but I am getting alerts on the passive firewall for two weeks.The service route is configured via the management interface. the alerts are generated frequently.The active firewall is working fine. Below is the alerts:- PAN-OS version is 9.1.6can anyone have an idea how to troubleshoot this issue?

Jafar_Hussain_0-1622718681915.png
  • 24379 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks