General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4468 Views
  • 0 replies
  • 0 Likes

PANGP virtual adapter disabled automatically

Many of users are facing issue in connect Global Protect VPN. We notice when we restart PANGP virtual adapter disabled automatically .we restart service and after that issue fix for day or two day’s but again this issue persist. Requesting you please provide permanent solution on this issue.

SurajN by L2 Linker
  • 27563 Views
  • 2 replies
  • 0 Likes

JSON format

I have a PAN config that is in json format that I want to implement on a 3060 fw. It seems that the fw will only take config in "set" command format or .xml. I am new to PANOS, I know in JUNOS you could do a "load override terminal" and drop this format onto the fw. Is there a way to drop this json config onto the fw, or convert it to a .xml...

Resolved! Global Protect ios internal gateway no username?

I have internal gateways that are functioning normally with Windows and Macs. New Ipads we are working with will recognize internal connection, and show "connected internal", but I do not see a username come through in the logs. I thought a username would come through just like any other device? I am manually typing in a username/password,...

Sec101 by L4 Transporter
  • 4765 Views
  • 4 replies
  • 0 Likes

SMTP default port change in panos 9.1.6

Hi Team, We are configuring email server for critical system alert. We have got gateway IP and port as 587. By default i think port 25 is supported for SMTP. Is it possible to change port number 587 in panos 9.1.6 ?This option is available in panos 10.0 but is it possible in 9.1.6? ThanksOm

Resolved! Aggregated Ethernet interfaces - recommended maximum number of sub-interfaces

HiI'm just after a bit of advice.PA3220 - I have configured an aggregated interface and configured a number of sub-interfaces below this for each individual client - is there a maximum recommended number of sub-interfaces that can be configured below the aggregated interface? I am concerned I have over 20 at the moment and I don't want to hinder...

JulianH by L1 Bithead
  • 9990 Views
  • 4 replies
  • 0 Likes

Not able to login to Production Firewall

Hi have HA 32XX Series production firewall 9.0.5 version, I was doing password comlexity comit and after that i am not able to login via GUI/SSH/Consle and showing invalid password. I opened TAC and they suggested to revert configuration via maintainance mode , To minimize the risk i rebooted the passive pair and i am not able to find configurat...

Resolved! Deactivate Licenses from Customer Portal

Good morning, How do we remove the expired licenses from the Customer Portal? I have 'trial' licenses that I have removed from the actual FW (delete license key <key file>) via the CLI, and that works fine. However, if you 'refresh' the licenses on that FW, those expired licenses come right back, as they are still listed in the Customer ...

Resolved! Impact of this command?

Can anyone explain what the impact to the firewall of running this command would be: delete license key <logging_service_key> Would it prevent it from working suddenly, would it just be for the logging service and then it would have to refetch the key? Thanks!

CDL Syntax Query.

From what I can tell, CDLs syntax is extremely limited compared to that of Panorama. Does anyone think differently? Any tips/tricks you can share for more in depth queries? For example:excluding multiple IP ranges;limiting the search one user, but including multiple apps/destinations with an OR. Essentially anything you would use parenthesis for...

PA-3020 - SYSTEM ALERT : critical : Disk usage for / exceeds limit, 95 percent in use

Hi Team, We are frequently experiencing Disk Usage exceeds limit alerts for PA-3020. s/w version: 9.0.11 Please find our findings below, Disk Space==============================Filesystem Size Used Avail Use% Mounted on/dev/root 3.8G 3.3G 348M 91% /none 1.9G 64K 1.9G 1% /dev/dev/sda5 7.6G 4.6G 2.6G 64% /opt/pancfg/dev/sda6 3.8G 1.6G 2.1G 44% /op...

VishnuPS by L3 Networker
  • 4866 Views
  • 2 replies
  • 0 Likes

Security Policy is passing the service which is not configured in policy.

We have created a VPN to Trust rule for just FTP and SSH Service for server in which we have Allowed only those services with application any. But the some of the traffic is passing with the some random service port with the same rule with application ftp which is not mention in security policy. Any Idea why is this happening.

Screenshot (501)_LI.jpg
Screenshot (502)_LI.jpg
MPESDC by L0 Member
  • 2763 Views
  • 3 replies
  • 0 Likes

VM-200 log disk resizing

Hi,Can we know if the following is possible with Palo Alto? 1.Resize the Log drive on a functional Palo VM without losing all contentWe’ve always had a secondary larger log drive when these were built – not big enough mind you.i.e. an offline resize with something like GParted instead of deleting the existing log drive and recreating a bigger lo...

Is is a bug on PAN OS 10.0.6?

Hello there I have recently update to PAN OS 10.0.6 and after that I realized in the Email Scheduler>Overide Email Address, if i have more than two, only the 1st one will be send and second one as CCed. all the other email address got dropped. I have tried to create a new scheduler but it is the same thing. Has anyone else got the same issue...

EdwardXu by L0 Member
  • 2344 Views
  • 2 replies
  • 0 Likes
  • 24379 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels