General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Palo decrypt error unsupported

Hi, We are receiving decrypt error in our ssl inspection traffic ++++As Per the below logs Server is using an unsupported EC curve x25519. Correct the server configuration to use a curve that the firewall supports.++++2021-03-17 06:59:01.789 +0100 Error: pan_tls_ec_curve_id_2nid(pan_ec_common.c:66): unsupported ec curve_id 29<<<<<...

BigPalo by L4 Transporter
  • 4229 Views
  • 2 replies
  • 0 Likes

Global Protect 4.0.2 -19 cannot connect to Portal

Hello everybody, we are facing a big problem regarding the GlobalProtect Client.Problem is that some Users can connect via GlobalProtect but some can not.Setting up a new User Profile fixes the Problem but that is not a solution.We are struggeling to find the cause inside the User Profiles which causes this behavior. If any of you have a suggest...

husetech by L2 Linker
  • 15231 Views
  • 11 replies
  • 0 Likes

Consolidating or aggregating IP addresses in Processor

Apologies if this question has been asked before, I searched the board but couldn't see anything that stood out I'm consuming the SANS/IRC list of IP addresses attributed to Internet Security Researchers, in an attempt to cut-down on false-positive threat alerts in customer networks. The Miner I wrote works fine, and pulls down about ~6700 IP ...

My paloalto firewall isn't picking up any traffic or showing any sessions.

So i recently configured the Ethernet ports on the firewall and i plugged an Ethernet cable from my switch to port 1 on my firewall and I'm not seeing any traffic logs on the monitor board (only system logs and configuration logs are showing) and it's showing no active sessions. I also plugged the mgmt port to the switch. *Note: my internet go...

Force global protect reconnection

Hi all, my config in global protect works fine. Prelogon goes up but when you logon to windows, if there no network available client goes in connection failed. I would like it ot try to reconnect as soon as I get internet access. Now I have to force a refresh connection.Is it possible? Where's the trick? Thanks

Resolved! (module: device) commit failed

We have firewalls in HA which have 2 virtual systems. On commit and push to policy and objects to vsys1 is failing with below error message. I can't figure out what is causing this.

image.png
raji_toor by L4 Transporter
  • 16683 Views
  • 4 replies
  • 0 Likes

Resolved! Allow workstations to join domain controller

I am new to palo alto firewall. I have to configure the firewall rules to allow workstation to join the domain controller. The workstation is placed in LAN zone while the domain controller is placed in SRV zone. I have added the rule to allow LAN zone to authenticate with SRV zone using 'active directory' application and 'application-default' se...

Script error

while logging in to the program, I received a script error message code 0, please help 

Untitled.png

SMB Resource unavailable

Hello,Today we had an issue with our PA-820. The access to our fileserver via SMB was reported as Resource not available in the firewall monitor and nearly all users had difficulties while accessing the file-server.We solved that issue by switching to our passive firewall. Then everything was immediately working correctly.We are using PAN-OS 9.1...

MikeHinz by L1 Bithead
  • 3537 Views
  • 3 replies
  • 0 Likes

Query regarding upgrade consideration in Panos 10.0 for "Address Groups and Service Groups"

On upgrade to PAN-OS 10.0, the Panorama management server checks for duplicate addresses in address groups (Objects > Address Groups) and services in service groups (Objects > Service Groups), and fails to commit any configuration changes if duplicate address objects and services exist.Workaround: Before you upgrade to PAN-OS 10.0, modify ...

Deepak_K by L3 Networker
  • 3248 Views
  • 2 replies
  • 0 Likes

Minemeld crashes every few days

Hi there, I'm pretty sure we've installed everything correctly and things are largely working well but every few days the system stops functioning and we need to uninstall Libtaxii and PYTZ. Then we reinstall the correct versions 1.1.111 and 2017.2 Then update the METADAT file. Any idea on what might be occurring or how to stop?

Palo Alto Stopped taking New Policy Traffic.

We recently upgraded the Palo Alto version to 9.1.7 on our physical hardware 3200 series. After 02 days we notice that before upgrade all policy rules and NAT works fine. However, The NAT and policy which we created after the upgrade not working. Not traffic or hit shows in monitoring. We rebooted the PA once still is not fixed. Is it a bug in ...

  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
Labels