This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! tunnel monitor works improperly

hello I am trying to enable the tunnel monitoring for an IPSec tunnel(not sure what device the other end is using) and got very interesting result.The proxy id config islocal:172.16.17.3/32remote: 146.48.211.0/24 My client subnet 172.16.2.0/24 will be natted to 172.16.17.3/32 while accessing to 146.48.211.0/24. I assigned an IP 172.16.2.222 to t...

DongQu by • L2 Linker
  • 4223 Views
  • 1 replies
  • 0 Likes

Automation of GlobalProtect installation

Hi all, I am trying to automate the deployment of GlobalProtect software in laptops with Ubuntu installed and I have faced an issue not easy to explain. The operating system is being deployed automatically in chroot mode, and one of the last steps involves installing the package of GlobaProtect as root ( dpkg -i GlobalProtect-latest.deb) After t...

What does it means Stage e Events GlobalProtec Fields?

Dear, we are doing a large and hard troubleshooting to forensic analysis into our company, so we need know more information about the "GlobalProtect Stages and Events columns Logs Monitor".Example: what it means the stages: before-login, tunnel, host-info, login and configuration. What it means the events: gateway-tunnel-latency, gateway-logout,...

rennersf by • L0 Member
  • 2338 Views
  • 1 replies
  • 0 Likes

GRE passthrough

Hi, we have a site on an already trusted zone, we require to allow GRE traffic through the FW to enable our wireless access points communciate back to the wireless controller (aruba). I have created a custom security policy to allow this gre and papi (aruba protocol), however the GRE traffic is being dropped/denied by a default interzone policy....

DForde by • L1 Bithead
  • 2908 Views
  • 2 replies
  • 0 Likes

DNS security service review

Hello all, has anyone tried DNS security service on Physical NGFWs? Does it provide any additional benefits compared to the regular Anti-spyware protection with Threat licensing? Please post your reviews. TIA.

datapne interface not reflected in user-id agent after changing service route

we have changed service route of user-id and ldap service from mgmt to dataplane interface of firewall. in windows based user-id agent earlier mgmt ip was showing connected,but after changing service route to dataplane interface , dataplane interface not showing in windows based user-id agent connected list. do we require to change serivce route...

Deepak25 by • L3 Networker
  • 2306 Views
  • 1 replies
  • 0 Likes

Failed O365 Updates

We have two sites running PA-3020, one site is able to download O365 updates but the second site fails to download and install the updates. Not sure what im supposed to be setting on the 2nd Palo Alto to get this working. They are both running 9.0.12 update

Connection issues with globalprotect VPN

I am the only Linux user in our 4000 person company. The company got me the linux client, but they don't want to support it. I hope that somebody here can help. Note that I replaced our gateway address with x.x.x.x since I don't want to expose the company's gateway. I have the following processes running in my system, started at boot...1057 ?...

Resolved! Does Globalprotect application use certificate revocation list (CRL) to check the gateway certficates?

Hello to All, We have intermitant issues with the HIP report not being send every hour but I also see that there are some intermitant errors about the gateway certificate not being verified, I also see that there are messages in the PanGPS log "Check server certificate revocation returns" as also the portal and gateway certificates are publicly...

Resolved! GP portal error

Restriction of the users on the GP portal page. We selected a particular group in the allowed list, but authentication was failing unless we select all.

FTP application not able do the Data Transfer. Logs Showing Unknown TCP application with some Random Ports.

We have just created a simple security for ftp services. Application ftp and service port any for ftp service. We can be able to connect the server but on data transferring the connection got timed out. When we just do application and service any. These services are working properly. but the application shows unknown tcp and destination port are...

User-ID for large scale deployment

Hi,We have planned to implement user based policy in PA and we have roughly around 5k users across different locations with multiple controller as we have two options,1. Dedicated windows based user-id agent2. Palo alto Integrated user-id agentamong these two which one is best for production with 5K+ users and what is best practice for deployin...

nkmehta by • L0 Member
  • 2935 Views
  • 2 replies
  • 0 Likes

Resolved! PaloAlto Bandwidth Report

Hi, I have an existing web application that I am contemplating moving to the cloud from on-prem. The app currently sits in a DMZ on a Palo 220. I am trying to determine the costs we would incur if we moved the app to the cloud. I need to get a good understanding of the bandwidth that comes into the app, and goes out. The traffic is based on h...

  • 24431 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks