General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Trouble with IPSec Site2Site VPN

I am a beginner in the Palo Alto World.

I want to setup a Site2Site VPN to a customer.
The customer has a Palo Alto System running.

I cannot get the tunnel up.

The admin of the customer and me are troubleshooting the problems, but so far nothing is worki

...

c.keller by L1 Bithead
  • 7513 Views
  • 8 replies
  • 0 Likes

Resolved! HA not working with interface monitoring any

Hello all,

 

i configured HA between paloalto peers , and HA failover as default without definig specifc interfaces and left it to "any"

 

when interface of inside zone shutdown from switch side , failover will not be trigered ? and need to fix it

BPA - Sanctioned apps

This might be a naïve question. But how does it help me/organization going through every single app and marking it sanctioned, tolerated or unsactioned. It seems to me of no use, other than for the reports for executives, while apps still get allowed

...

raji_toor by L4 Transporter
  • 3400 Views
  • 4 replies
  • 0 Likes

Resolved! Globalprotect VPN tunnel interface-IP address

My global protect VPN's tunnel interface does not have an IP assigned but I would like to assign it a fictitious IP to enable tunnel monitoring/ dynamic routing.  will it cause any issues to the remote users? what role does this IP play in the tunnel

...

Cant commit to panorama - This config has been sanitized

Hello
IM trying to modify one of template and create extra account. However i receive this error.

 

  • Partial changes to commit: changes to configuration by administrators: admin
  • Changes to template configuration: (firewall_template)
  • This config has been sa
...

wjt82918 by L1 Bithead
  • 3895 Views
  • 1 replies
  • 0 Likes

Resolved! Upgrade dedicated log collectors from 8.1.6 to 9.1.4

After upgrading, I can no longer login to the dedicated log collectors via the CLI or serial console.

Prior to the upgrade, and I mean just before, I did login via ssh to show system info and see I was at 8.1.6.

Right after the upgrade, my intention wa

...

MarkDufault_0-1602179567003.png

User-ID Agent, uninstall slows down network logons

Hello,

 

I am not a Network Engineer but am trying to assist the folks running the network at my company. I am in charge of Active Directory. The Network Engineers recently uninstalled the Palo Alto User-ID from two of my Domain Controllers. Since then

...

VPN - INTERMITTENT/UNSTABLE VPN CONNECTION

Hi,

In my team multiple users upgraded windows 7 to windows 10 after that VPN intermittent issue happened. every 5 seconds VPN(GP Clint) is disconnected. i tried uninstalled GP in mobile and also laptop but still same happened. latency is normal and t

...

Resolved! When will the GlobalProtect GUI be supported on Ubuntu 20.04

I see on the following documentation page that only the CLI version of GlobalProtect is supported on Ubuntu 20.04, not the GUI version.  Does anyone know when the GUI version wil be supported, or where I should look to find this information?  Thanks!

...

arderyp by L0 Member
  • 15054 Views
  • 3 replies
  • 0 Likes

Site to Site IKE Gateway Setup on 5250

Trying to set up ptp vpn between PA200 and corporate 5250.  I haven't found a "How to set up if the PA200 is behind home modem" article as of yet.   Is it my understanding that  when I select the 5250  "Peer IP Address Type"  = Dynamic  it means that

...

vnt90 by L2 Linker
  • 2415 Views
  • 3 replies
  • 0 Likes
  • 23712 Posts
  • 104 Subscriptions
Top Solution Authors
Top Liked Authors
Labels