This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

User-ID only tags IPv4 or IPv6 address in dual stack

I've got the User-ID agent installed on three servers and I've recently began enabling IPv6 internally and I've noticed a problem. The traffic logs in Palo Alto only associate either the IPv4 address or IPv6 address of a machine with a username depending on what is the preference in Windows. How can I get the username to be associated to both ...

Lcroce by • L1 Bithead
  • 5505 Views
  • 3 replies
  • 1 Likes

can MineMeld be installed on ubuntu 20.04?

I'm getting this error, how do i get around it? $ sudo apt install -o Dpkg::Options::="--force-overwrite" -y minemeldReading package lists... DoneBuilding dependency tree Reading state information... DoneSome packages could not be installed. This may mean that you haverequested an impossible situation or if you are using the unstabledistributi...

Thyrion by • L2 Linker
  • 4952 Views
  • 2 replies
  • 0 Likes

NGINX configuration for SSL Inbound Inspection

Hello everybody, I'm trying to enable SSL Inbound Inspection to decrypt traffic to an internal webserver that runs on NGINX. I have already added the server certificate and key, and set up the corresponding decryption policy. The problem is that the firewall is not able to decrypt the traffic due to unsupported cipher, so I'm trying to force t...

grenzi by • L3 Networker
  • 4552 Views
  • 2 replies
  • 0 Likes

Resolved! RHEL7 - /bin/sh ./configure Permission Denied

Hi all,I'm installing minemeld-ansible on Redhat 7.When i run this command:sudo ansible-playbook -K -i 127.0.0.1, local.ymli got this error:`PLAY [minemeld playbook] *************************************************************************************************************************************************************************************...

Resolved! PA-220 Size

dear all,in my environment, we have 100 computers and 8 servers, one internet connection, maximum 10 or 15 users need VPN and we planning To buy PA-220 .question: Does this device meets our needs?

YOOG887 by • L1 Bithead
  • 6511 Views
  • 7 replies
  • 0 Likes

trust-untrust common apps block user

Without giving any low level infohow would a person go about a blocking a single user, via policy, get blocked from trust-untrust common apps w/o affecting other users?Create a policy above it? Or negate the user?

PA200-1 by • L1 Bithead
  • 2179 Views
  • 1 replies
  • 0 Likes

Disable TCP 1323 Timestamp response through Palo Alto Firewall?

Hi,I'm wondering whether is there a way to set the PAN Firewall to detect and drop TCP 1323 Timestamp queries to servers?According to some web vulnerabilities scanning reports, it is reccomended to disable the TCP Timestamp as it discloses server uptime information, allowing attackers to guess the OS patch status.In the recent Windows server OS ...

TCP timestamp response During the vulnerability assessment

In my case, the team is performing a vulnerability assessment on PA820Vulnerability Title: TCP timestamp response.Description: The remote host responded with a TCP timestamp. The TCP timestamp response can be used to approximate the remote host's uptime, potentially aiding in further attacks. Additionally, some operating systems can be fingerpri...

Resolved! Migrating config from PA -500 to pa 220

IHi,Planning for upgrading PA-500 to PA-220, Just wanted to be sure that if we download the current running config from PA-500 and import it to new PA-220 device, will that work? I am not sure if Importing configurations between non-matching hardware versions works in this case,according to thishttps://knowledgebase.paloaltonetworks.com/KCSArtic...

Prelogon - PanCredGet

PAN-OS - 9.0.3Global Protect 5.0.3 We are having problems with GPPrelogon. Logs: (T7612) 07/22/19 15:20:16:670 Debug(5727): REGION-PRIO, region code is GB(T7612) 07/22/19 15:20:16:670 Debug(10868): REGION-PRIO, save region code GB(T7612) 07/22/19 15:20:16:670 Debug(5783): Portal authentication-message is Enter RAFA login credentials(T7612) 07/2...

BizBo by • L2 Linker
  • 9252 Views
  • 3 replies
  • 0 Likes

Best siem

Hello all its been a long time, since they took away my sentinel role I haven't been on here much. Does anyone have a recommendation for a siem?

jdprovine by • L4 Transporter
  • 6745 Views
  • 5 replies
  • 0 Likes

Resolved! CEF PANOS 10

Morning! I can see that PANOS 9.1 has a CEF will this work on PANOS 10 as I have not been able to find the CEF for PANOS 10 Thanks BizBo

BizBo by • L2 Linker
  • 2942 Views
  • 1 replies
  • 0 Likes

Resolved! blocking machines from AD-group

Is it possible to block outgoing traffic, from an active-directory group containing machines?blocking traffic by username works fine, but i want to use the machine ad group rather than entering all machines by fqdn or ip in an address group of objects on my pa.i'm using a pa-3020 on pan-os 5.0.1thanks

skemena by • L1 Bithead
  • 5685 Views
  • 5 replies
  • 0 Likes
  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks