General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Lost sessions with Wildfire active

Hello everyone,Currently, I have 2 FW model 5220 active/active version 9.0.12.When I have Wildifire activated I have seen that I have session losses and incomplete sessions.Can anyone help me? I have not seen any known BUGsRegards.

BigPalo by • L4 Transporter
  • 3119 Views
  • 3 replies
  • 0 Likes

Resolved! GlobalProtect Clients Not downloading

Hi, I want to ask we have new firewall we configure all the things Dynamic update / License all ok . But when we try to get all the Latest GlobalPortect Clients from Server . It is only showing the list no other ?We try from CLI , Rebooted three time. Is this is Error or issue can some one help us.

2021-05-19_14-33-25.png
NavidAlam by • L3 Networker
  • 14241 Views
  • 14 replies
  • 0 Likes

How to configure SNMP v3 in firewalls for Solarwinds

Hi, Wish to configure SNMP v3 for Solarwinds in our firewalls. So we have a Solarwinds devices and Palo Alto firewalls. Wanted to know what all information(Data) required if solarwinds to be added in palo alto firewalls, how to set up a communication between Solarwinds and Palo alto firewalls. How to configure these, wish to get helped. Please h...

User format not consistent

We have a strange inconsistency with our users traffic sometimes showing in our FW logs sometimes as organizationdomain.com\username and sometimes as orgdom\username. Every now and then they also just register as no user at all. I haven't really been able to track this one down. Has anyone had anything like this happen?

bjhughes by • L0 Member
  • 3563 Views
  • 3 replies
  • 1 Likes

PACKET BUFFER SIZE

Hi Team,Kindly let us know how can we find out the packet buffer size of the VM-300 series PA firewall.

tejasj by • L0 Member
  • 3082 Views
  • 1 replies
  • 0 Likes

DNS packets in drop stage, but i can see the same packet in transmit stage and DNS server response as well.

Hi Community I am seeing a strange behavior with DNS traffic. I tried to resolve some FQDns which work fine (those are public fqdns). But when I do the packet capture, I can see the same packets in transmit and drop stage. By comparing the tcp port and dns transaction id, i can see those packets sent only once by end machine and the same in both...

PAN-DB API for URL Re-categorization

I apologize if this has been asked before, but I could only find some posts from 2014. Is there an API for PAN-DB that allows for automated submissions for URL re-categorization? Thanks in advance!

Gergen by • L1 Bithead
  • 9406 Views
  • 6 replies
  • 0 Likes

Microsoft Failover Cluster node not sending out Gratuitous ARP requests after a failover

This was a particularly odd issue which I had never experienced before so I thought it’s worth blogging about it.During a normal MS Failover Cluster failover operation, the node calming the cluster roles sends out a GARP request to notify the networking infrastructure of the MAC address change. The Layer 3 switch / router then updates the MAC ad...

Resolved! SSL Decryption internet throughput issues

Hello everyone, We have been testing SSL Decryption on a single PC, when decryption policy is applied, internet connection speed is highly affected - Speedtest shows less than 1mb/s When decryption policy is disabled, the speed is around 200mb/sPalo Alto 3220, version 9.1.0We are using a certificate from our domain CA, SSL decryption works fine,...

Transfer finished course from personal Beacon account to partner Beacon account

Hi, Does anyone know if its possible to transfer the courses you have completed in your personal Beacon account to your Partner Beacon account? I finished a bunch or courses before starting my new role as Network support engineer and would like to move the certifications from my personal account to my partner accounts. Thanks

Ben-Price by • L4 Transporter
  • 2223 Views
  • 1 replies
  • 0 Likes

Resolved! Global Protect Always On When Coming Into the Office

I finally got certificate based always on GP VPN working when my laptop is at home. It occurred to me that when people go into the office, they'd be on the internal LAN.How is that normally handled? Since I currently have an egress separate from the GP PAN the traffic would hit the same portal as when they're home and noonewould be the wiser. Bu...

Resolved! Why ip address are different at gui and cli

Hello, ip address was changed to below ip address via gui, please see the below first picture. but why cli shows different ip address at the same interface? and the the PA cannot ping itself. Anyone can help to explain it? Thank you

PAFrank_0-1621221800133.png
PAFrank_1-1621221875576.png
PAFrank by • L2 Linker
  • 5675 Views
  • 3 replies
  • 0 Likes
  • 24460 Posts
  • 125 Subscriptions
Top Solution Authors
Top Liked Authors
Labels