This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Replacing a managed old hardware model with a new model

Hi, I am going to replace my old 3020 9.0 panorama-managed firewalls with a pair of 5200 series FW. During the process I’ll need to change some of its network interfaces configurations with vpn tunnels on the new model. Would you advise to change the old serial to new in the panorama configuration, or should I import the new model into panorama ...

alberty by • L1 Bithead
  • 8300 Views
  • 6 replies
  • 0 Likes

Replacing 3020HA to 3220

Getting ready to replace a 3020 HA - Active/Standby to a single 3220. Looking to see what the best steps to take and if there are any gotchas I should be on the lookout for. Logic tells me; Make sure both are on the same OS code, export the running-config from the 3020, then import into the 3220 and see if I get any validation errors and test aw...

Deployment job upload wildfire to <fw> failed. Device msg:'Failed to download panupv2-all-wildfire-564367-567485.

Hi,We get these error often, 'cannot connect to server'.There are no network connectivity issues and everytime I test get the following: Test wildfire Public CloudTesting cloud server wildfire.paloaltonetworks.com ...wildfire registration: successfuldownload server list: successfulselect the best server: panos.wildfire.paloaltonetworks.com Someo...

Resolved! Site-to-Site VPN private subnets cannot ping eachother through the tunnel

I am new to learning Palo Alto Firewalls. I have a couple of PA-8.0.0 virtual machine instances setup on my desktop with internet access through my home network on a Windows 10 host machine, for learning purposes. I configured site-to-site vpn and can get the tunnel up, both phase1 and phase2. The firewalls can ping eachother’s external IP ad...

Resolved! HA peer determined to be Active through managed devices; staying in Passive state

We have received below email alert from Secondary Panorama , what's the meaning of this critical severity event?actionflags: 0x0type: SYSTEMsubtype: haconfig_ver: 0time_generated: 2021/06/04 10:22:37high_res_timestamp: 2021-06-04T10:22:37.000+05:30dg_hier_level_1: 0dg_hier_level_2: 0dg_hier_level_3: 0dg_hier_level_4: 0vsys_name:device_name: PANO...

Deepak25 by • L3 Networker
  • 3559 Views
  • 1 replies
  • 1 Likes

Old Palo alto firewall || Demo PaloAlto firewall

Dear Team,I am a big fan of PaloAlto firewall and i am working PA firewall science lase 4-5years. So i wants to create one Lab in my home and wants to share the free PA training over Youtube, already i have started the training with VM trail license but its consuming huge resources in my laptop. So, can any one help me to give one retired PA sm...

Integration of Palo Alto with Azure AD for authentication of users using SSO

Hi, I have below requirement for providing access to users based upon using user-ids/AD groups in security policies. 1. These users are using Macbook and they login by using their email Ids for login into their machines.2. Authentication of their login via email Ids is taking place via Azure AD not via On-premises AD. Traffic for all these users...

Resolved! File Blocking Profile - Can not block file-transfer over "Wechat-file-transfer" Application

Hi guys,Our customer want to block file over "Wechat-file-transfer" application. I searched on Application then seen "wechat-file-transfer" on Application database. But, I can not search any "wechat..." on application field on "File Blocking Profile" as pics: Can not search "wechat-file-transfer" when create File Blocking profile: How to reso...

ThomasX_0-1622777792737.png
ThomasX_1-1622777812206.png
ThomasX by • L1 Bithead
  • 7245 Views
  • 2 replies
  • 0 Likes

downloads time out

Greetings, i built a new dmz with a short list of apps allowed in (trust) out (untrust) and am having issues with downloads initiated using http(s)seeing the download age out. i have allowed ssl and web-browsing and a few other apps....can anybody help with what i have missed? thanks!-tom

tcsmithh by • L1 Bithead
  • 2812 Views
  • 3 replies
  • 0 Likes

Reporting on Coin Miners

I would like to get a view on what crypto/coin mining activity is going on inside my network but there isn't an application category that covers this - they are just classified as internet-utility and have varying other attrributes. I can't create an application filter that picks them out either, at least not without including google-base or ot...

djr by • L4 Transporter
  • 2276 Views
  • 1 replies
  • 0 Likes

Happening in June: The Complete Zero Trust Network Security Event

Greetings everyone, Don't miss Palo Alto Networks' Complete Zero Trust Network Security event coming up in June. This event will cover the following points related to the newly unveiled Zero Trust Network Security: Secure access to the right applications: The first integrated CASB Secure access for the right users: by using the Cloud Ident...

seattle-launch-live-community-r2b-1100x120.jpg
jdelio by • L7 Applicator
  • 3083 Views
  • 1 replies
  • 4 Likes

Pre-defines application not working ?

Apology for asking multiple question for the past one week.. We've define a policy to allow active-directory-base application which includes most of the AD standard ports, but the traffic is not hitting the policy, eventhough the destination ports are a match. Any reason why ? As a workaround for now, we added new custom service for the policy ...

annielee by • L2 Linker
  • 2245 Views
  • 1 replies
  • 0 Likes
  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks