General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 am PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! GP portal error

Restriction of the users on the GP portal page. We selected a particular group in the allowed list, but authentication was failing unless we select all.

FTP application not able do the Data Transfer. Logs Showing Unknown TCP application with some Random Ports.

We have just created a simple security for ftp services. Application ftp and service port any for ftp service. We can be able to connect the server but on data transferring the connection got timed out. When we just do application and service any. These services are working properly. but the application shows unknown tcp and destination port are...

User-ID for large scale deployment

Hi,We have planned to implement user based policy in PA and we have roughly around 5k users across different locations with multiple controller as we have two options,1. Dedicated windows based user-id agent2. Palo alto Integrated user-id agentamong these two which one is best for production with 5K+ users and what is best practice for deployin...

nkmehta by • L0 Member
  • 3007 Views
  • 2 replies
  • 0 Likes

Resolved! PaloAlto Bandwidth Report

Hi, I have an existing web application that I am contemplating moving to the cloud from on-prem. The app currently sits in a DMZ on a Palo 220. I am trying to determine the costs we would incur if we moved the app to the cloud. I need to get a good understanding of the bandwidth that comes into the app, and goes out. The traffic is based on h...

Troubleshooting random GlobalProtect disconnects...

Hello. i have been experiencing random GlobalProtect disconnects on my home computer. I'm running Windows 10 [1909] with GlobalProtect 5.0.8 64-bit connecting back to my office's Palo Alto firewall (not 100% sure of the version). A few times a day, GlobalProtect will just disconnect on its own. I am typically running a Remote Desktop Connection...

jrauman by • L2 Linker
  • 145919 Views
  • 21 replies
  • 3 Likes

App Google Earth

Good morning, I have a problem opening the google earth client to users. For some time it seems that randomly it also needs the google-play application to be open, if you want to have the latter closed to the user there is some way to make an exception so that google earth works correctly without opening google-play, Thank you

EVelarde by • L0 Member
  • 2926 Views
  • 1 replies
  • 0 Likes

PanOS ldap issue

Hiwe are facing some issues on our 3220 fw 9.1.9 (same issue in 9.1.8) ldap group membership sync is not working anymore this 3220 Fw is our Lan FWldap server profile is correctwe can add correctly group in the user group mapping, AD tree is browsablebut groups are empty or "does not exist or does not have member " the fact is that we also have...

Resolved! Replacing a managed old hardware model with a new model

Hi, I am going to replace my old 3020 9.0 panorama-managed firewalls with a pair of 5200 series FW. During the process I’ll need to change some of its network interfaces configurations with vpn tunnels on the new model. Would you advise to change the old serial to new in the panorama configuration, or should I import the new model into panorama ...

alberty by • L1 Bithead
  • 8517 Views
  • 6 replies
  • 0 Likes

Replacing 3020HA to 3220

Getting ready to replace a 3020 HA - Active/Standby to a single 3220. Looking to see what the best steps to take and if there are any gotchas I should be on the lookout for. Logic tells me; Make sure both are on the same OS code, export the running-config from the 3020, then import into the 3220 and see if I get any validation errors and test aw...

Deployment job upload wildfire to <fw> failed. Device msg:'Failed to download panupv2-all-wildfire-564367-567485.

Hi,We get these error often, 'cannot connect to server'.There are no network connectivity issues and everytime I test get the following: Test wildfire Public CloudTesting cloud server wildfire.paloaltonetworks.com ...wildfire registration: successfuldownload server list: successfulselect the best server: panos.wildfire.paloaltonetworks.com Someo...

Resolved! Site-to-Site VPN private subnets cannot ping eachother through the tunnel

I am new to learning Palo Alto Firewalls. I have a couple of PA-8.0.0 virtual machine instances setup on my desktop with internet access through my home network on a Windows 10 host machine, for learning purposes. I configured site-to-site vpn and can get the tunnel up, both phase1 and phase2. The firewalls can ping eachother’s external IP ad...

Resolved! HA peer determined to be Active through managed devices; staying in Passive state

We have received below email alert from Secondary Panorama , what's the meaning of this critical severity event?actionflags: 0x0type: SYSTEMsubtype: haconfig_ver: 0time_generated: 2021/06/04 10:22:37high_res_timestamp: 2021-06-04T10:22:37.000+05:30dg_hier_level_1: 0dg_hier_level_2: 0dg_hier_level_3: 0dg_hier_level_4: 0vsys_name:device_name: PANO...

Deepak25 by • L3 Networker
  • 3658 Views
  • 1 replies
  • 1 Likes

Old Palo alto firewall || Demo PaloAlto firewall

Dear Team,I am a big fan of PaloAlto firewall and i am working PA firewall science lase 4-5years. So i wants to create one Lab in my home and wants to share the free PA training over Youtube, already i have started the training with VM trail license but its consuming huge resources in my laptop. So, can any one help me to give one retired PA sm...

Integration of Palo Alto with Azure AD for authentication of users using SSO

Hi, I have below requirement for providing access to users based upon using user-ids/AD groups in security policies. 1. These users are using Macbook and they login by using their email Ids for login into their machines.2. Authentication of their login via email Ids is taking place via Azure AD not via On-premises AD. Traffic for all these users...

  • 24479 Posts
  • 125 Subscriptions
Top Solution Authors
Labels