General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4111 Views
  • 0 replies
  • 0 Likes

Global Load Balancer (DNS) for GlobalProtect Portal

Looking to set up multiple data center redundancy for GlobalProtect and I'm unsure if Palo Alto would support a global load balancer (GLB) for the solution. We have global load balancer DNS servers that detect the status of our DC internet connections and will remove the IP's from the DNS entry if an ISP is down. The TTL on the DNS entries is ...

yostie by L0 Member
  • 8297 Views
  • 1 replies
  • 2 Likes

Resolved! Always On Global Protect and file share access

I now have GP connected automatically with a certificate pushed out via InTune. This is on a Surface Laptop running Win 10. I typically log in with face recognition. After I log on and notice that I have TCP/IP access through the GP connection and internal DNS is working - I am trying to then go to a file share. \\whatever\sys$\whichever say. I ...

HTTPS Response pages

Hi, I know that there are many threads here about this. We would like to show the response pages for https. We saw this link but i have several doubts:https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFKCA0This command is enabled globally: "set deviceconfig setting ssl-decrypt url-proxy yes". So, is this command decrypt...

BigPalo by L4 Transporter
  • 7362 Views
  • 9 replies
  • 0 Likes

Resolved! Block wetransfer Upload

Hello everyone,I have a problem with allowing wetransfer to download and blocking the download,Wetransfer is part of the 'Online-storage-and-backup' category.The choice is to block this category and create a bypass just for downloading on wetransfer,On my side, I tried to create a URL whitlist category:we.tl/*wetransfer.com/downloads/*Do you hav...

QuentinH by L1 Bithead
  • 9598 Views
  • 4 replies
  • 0 Likes

Bulk Emails

Hi Team, We need our PA devices to block bulk mails from our trust zone.We have an email relay in our organisation.Can we achieve it through custom vulnerability signature by creating an signature and applying threshold value

Resolved! PBF for incoming connections

NAT translation goes like this:Destination NAT and Security Policy:https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/nat/nat-configuration-examples/destination-nat-exampleone-to-one-mapping.htmlPolicy Based Forwarding:Polices > Policy Based Forwarding >Under General Tab > Name "Incoming"Under Source Tab > Zone "Out...

jmora by L1 Bithead
  • 2958 Views
  • 1 replies
  • 0 Likes

Site to site vpn

Hello, can anyone please help me for the below request? site to site vpn setup for oracle cloud using palo alto CPE. Can someone please tell me recommend setting for Phase 1 (ISAKMP) and Phase 2 (IPsec)?? thank you!

Poo173 by L0 Member
  • 2208 Views
  • 1 replies
  • 0 Likes

Mitel telework phone one way audio

Anyone ever seen a one way audio when mitel phone configured for telework mode is on the inside trusted network? The mitel border gateway is in the dmz nat'd to an outside public ip, and works fine with all phones but telework enabled phones when on the inside lan. Thanks, Jeff

Customer ID or Sales Id

Good day, I have a trouble creating an account for customer support, I don't know where can i find the customer id or sales id. Hope you help me with this problem. Thank you

jreyes by L0 Member
  • 4616 Views
  • 1 replies
  • 0 Likes

Seeing Decryption Policy Usage on Prisma.

Does anyone know if there is a way to see what traffic, or if traffic, is hitting decryption policies for Prisma traffic? I have some policies I would like to clean up if I can, but unlike security policies, I can't seem to filter traffic that may be utilizing decryption policies. Thanks.

  • 24332 Posts
  • 124 Subscriptions
Top Solution Authors
Labels