General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Force global protect reconnection

Hi all, my config in global protect works fine. Prelogon goes up but when you logon to windows, if there no network available client goes in connection failed. I would like it ot try to reconnect as soon as I get internet access. Now I have to force a refresh connection.Is it possible? Where's the trick? Thanks

Resolved! (module: device) commit failed

We have firewalls in HA which have 2 virtual systems. On commit and push to policy and objects to vsys1 is failing with below error message. I can't figure out what is causing this.

image.png
raji_toor by L4 Transporter
  • 16752 Views
  • 4 replies
  • 0 Likes

Resolved! Allow workstations to join domain controller

I am new to palo alto firewall. I have to configure the firewall rules to allow workstation to join the domain controller. The workstation is placed in LAN zone while the domain controller is placed in SRV zone. I have added the rule to allow LAN zone to authenticate with SRV zone using 'active directory' application and 'application-default' se...

Script error

while logging in to the program, I received a script error message code 0, please help 

Untitled.png

SMB Resource unavailable

Hello,Today we had an issue with our PA-820. The access to our fileserver via SMB was reported as Resource not available in the firewall monitor and nearly all users had difficulties while accessing the file-server.We solved that issue by switching to our passive firewall. Then everything was immediately working correctly.We are using PAN-OS 9.1...

MikeHinz by L1 Bithead
  • 3564 Views
  • 3 replies
  • 0 Likes

Query regarding upgrade consideration in Panos 10.0 for "Address Groups and Service Groups"

On upgrade to PAN-OS 10.0, the Panorama management server checks for duplicate addresses in address groups (Objects > Address Groups) and services in service groups (Objects > Service Groups), and fails to commit any configuration changes if duplicate address objects and services exist.Workaround: Before you upgrade to PAN-OS 10.0, modify ...

Deepak_K by L3 Networker
  • 3272 Views
  • 2 replies
  • 0 Likes

Minemeld crashes every few days

Hi there, I'm pretty sure we've installed everything correctly and things are largely working well but every few days the system stops functioning and we need to uninstall Libtaxii and PYTZ. Then we reinstall the correct versions 1.1.111 and 2017.2 Then update the METADAT file. Any idea on what might be occurring or how to stop?

Palo Alto Stopped taking New Policy Traffic.

We recently upgraded the Palo Alto version to 9.1.7 on our physical hardware 3200 series. After 02 days we notice that before upgrade all policy rules and NAT works fine. However, The NAT and policy which we created after the upgrade not working. Not traffic or hit shows in monitoring. We rebooted the PA once still is not fixed. Is it a bug in ...

redist route from bgp to OSPF is sending more than the default route

When we turned up BGP in the Palo with ExpressRoute, we started to receive 4 subnets from Microsoft. The customer found that these subnets are being leaked into the Extreme Fabric through the OSPF adjacency to the Palo’s, where only Default route should be sent from the Palo to the Extreme. Not sure why this is happening, since it looks like th...

dbrenipc by L3 Networker
  • 5361 Views
  • 4 replies
  • 0 Likes

Resolved! Is the feature available for email reporting on getting the Threat log for every 15minutes on firewall

Hi Team, Greetings!!I have a query, whether there is a feature for generating an automatic Threat log report for every 15minutes.While checking with the firewall end i could find only for a day that is last working day alone and so on and so forth.Is there any other possible way to achieve this using any other methods? If so could some one share...

Issue with GlobalProtect after Upgrade

Hello, We're currently experiencing some issue with several clients that are trying to upgrade their client.They're moving from 2.3 to 5.1. Sometimes, the client cannot connect at all (clicking on connect button from gp client but nothing is happening)I went through multiple documentations and KB and what I found is that the service PanGPS is no...

Resolved! HA2 Options

What is the advantage of using the HSCI port for HA2 as opposed to using one or two data ports?Would a QSFP-40G-CR4 be compatible with the HSCI port? Or a SFP-H10GB-AOC5M? SFP-1000BAS?

  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
Labels