This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Registration now open - Interactive Event!

Hi everyone, If you haven’t already seen, registration is now open for our first interactive event all about the Best Practice Assessment (BPA) tool! You will be able to connect with subject matter experts, share best practices, and learn how this tool can improve your security posture. Register here. I’m registered and can’t wait to see ...

jdelio by • L7 Applicator
  • 4554 Views
  • 3 replies
  • 1 Likes

Resolved! EDL in vsys environment

Hello, We have a pair of 5250 running PANOS 8.1 with 125 vsys. We want to deploy EDL to block well known attackers. My understand is the EDL has a limit of 150000 entries for IP list. If I create a shared EDL (type IP list) with 10 entieres and create 2 panorama shared security rules for inbound and outbound for all 125 vsys. Is that count as...

VPN socket closed

Hi All, I have a user who connects via a thin client with GP to our network. Actually we have around 50 users, but this one user has many problems. She gets disconnected multiple times a day. She tried multiple connections: her current residence with both wifi and cable, at her parents, both cable and wifi (2 different cities), and mobile data f...

olloczky by • L1 Bithead
  • 5977 Views
  • 5 replies
  • 0 Likes

Does it work even if I install different models of PAN-OS?

Currently, we can download the PAN-OS Software Image of the PA-200, 800 and 3200 series from CSP.Does it work even if I install different models of PAN-OS? For example, the case of upgrading by installing PAN-OS 7.0.1 downloaded from PA-200 to PA-3050 with PAN-OS 6.1 installed. please answer about my question. Thank you.

Palo Alto VM No Internet in Browser

Hello,I have PaloAlto on GNS3 i set a policy from inside to outside and i also do the NAT policy Plus the virtual router configuration.from inside i can ping to internet but i cannot browse, is that related to licence or i miss something?Thanks.

Resolved! Decryption Breaks Palo Alto Dynamic Updates

I'm having an issue where my Decryption policy is breaking my Palo Alto Dynamic Updates. When I turn on decryption, and then attempt to download an Antivirus, Applications and Threats, or Wildfire update, I'm given the message "Invalid content image, Failed to download file". When I turn decryption off, the updates work perfectly. This seems...

Resolved! Action on a vulnerabilty found in a SMTP flow

Hello, How to configure the PA firewall to return a SMTP 541 when vulnerability is seen in a SMTP flow ? I have managed to do it with the AV protection but not with the vulnerability protection. Cedric

Cedricd by • L1 Bithead
  • 9188 Views
  • 8 replies
  • 0 Likes

Resubmit Host Profile required intermittently to restore connectivity.

Global Protect, running 5.0.8 w/ Mac 10.8.5.Client connects and works fine initially.At intermittent times, a few times a day, the client has to manually Resubmit Host Profile for the HIP rules to re-engage and restore traffic flow.This is obviously a problem as the user doesn't realize this is happening until their traffic fails.This is happeni...

kk555 by • L0 Member
  • 6021 Views
  • 1 replies
  • 0 Likes

Fortigate Minemeld URL feed injestion issue - outgoing URL connections blocked by Minemeld feed policy on Fortigate Firewall

Good afternoon, we've noticed a strange issue on a client firewall that injests URL IoCs from our Minemeld instance into an outbound block policy. Specifically it seems that the Firewall Minemeld Policy is blocking outgoing URLs connections that are not actually present inside the Minemeld URL output feed. We're investigating the issue as it see...

VCiverra by • L1 Bithead
  • 3283 Views
  • 1 replies
  • 0 Likes

Spli tunneling for ms-update files

Hi, We have GP configured with 0.0.0.0/0 inside tunnel. We would like to split-tunneling for microsoft updates. In the split tunneling profile we add several microsoft URLs in order to avoid but its not working.We added this URLS:*.update.microsoft.comdownload.microsoft.com But in data filtering we can see the updates being downloaded using PA. ...

BigPalo by • L4 Transporter
  • 3587 Views
  • 3 replies
  • 0 Likes

Resolved! PA-5050 PAN-OS version

Can anyone tell me the release date of interim release 8.1.16 (PAN-OS for PA-5050 firewall device)? I need this for informational purposes and know it is accessible on the "Software Updates" (downloads) section of Customer Support site but I do not have that level of access. (Combined release notes for version 8.1 has info. on all interim rele...

URL-Profile Duplicates

I have a PA running multiple vsys, and I'm getting the following error on multiple vsys instances: Warning: url-profile Demo URL Alert(id: 254) is considered duplicate of Demo URL Alert(id: 252) Is there a way to see what id:254 and id:252 are referring to so I can remove the duplicate? The profile is a clone of the default with very little cust...

Tacas Configuration Issue

Hi Team, We are using tacas server for authentication administrator account on panorama we have applied the tacas server authentication profile directly on Device > setup > management > authentication settings.when we are able to login from particular user we getting prompt of changing password.we had disabled the password complexity an...

  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks