This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

VM300 Live Migration - MS HyperV S2D - MAC Address/ MAC Spoofing

We have a 4 node Hyper V S2D cluster with a single VM300 appliance. We have been able to successfully live migrate the VM from node to node without any issues.We are in the process of modifying the North / South network fabric. I have successfully update the network on 3 of the 4 nodes. When I went to do the final node (the node that the VM30...

Resolved! NAT over IPSec tunnel.

hello all I have an IPSEC tunnel with ASA(99.1.1.23<> 123.2.4.105), the tunnel is UP but the source client is not able to access the destination server.The proxy ID on PA side islocal: 1.1.1.1remote: 2.2.2.2 both sides are using nat for the client/server behind the FWsthe source client IP is 10.10.10.10(NAT to 1.1.1.1) and the destination ...

DongQu by • L2 Linker
  • 16783 Views
  • 8 replies
  • 1 Likes

Resolved! Global protect External gateway in remote user time format issue

In global protect I want to see the Total number of user are Login in and Log out at which time. In Global-protect Gateway when i click on remote user i see current and previous user connected to through VPN. When i fetch PDF/ CSV file. In file the time it will see correct but when i downlaod this file the format is change like 15182019 for lo...

Resolved! How to give supply to PA220 R

We want to power on PA220 R , but it requires DC power supply.Is there any options available in market to provide DC supply to this model ?Can we use SMPS for DC supply ?Can we get AD to DC power adapter from Palo Alto Networks ?

Deepak_K by • L3 Networker
  • 4073 Views
  • 3 replies
  • 0 Likes

New GlobalProtect VPN connected but network connectivity lost after short time

Hi all, Something must have gone wrong in my config I just don't know what. Here is the situation. This is a new setup on PA-820 we have the GlobalProtect license. Some users including myself will connect to the vpn fine, access resources on the network and within a minute or so the network resources will just drop and fail, no status change ...

KJames by • L1 Bithead
  • 18625 Views
  • 8 replies
  • 0 Likes

ESXi Bootstrap Cant find init-cfg.txt

I'm testing out bootstrapping VM-Series firewall in ESXi. I've followed the documentation in relation to the bootstrap package etc. But for some reason when the firewall boots with the ISO I've created attached it complains that it cant find the init-cfg.txt file. See below error I see in the console on boot.btsErrorConfig: No init-cfg.txt file ...

IPsec tunnel connectivity issues

Hi, I have an IPsec Tunnel between 2 PA's and the status of tunnel and iKE shows red but the interface is green. Please advice on the troubleshooting steps.

Akhil_B by • L2 Linker
  • 4624 Views
  • 3 replies
  • 0 Likes

Resolved! IPSec VPN phase2 partial up

hello everyone I have a IPSec tunnel with Cisco ASA, and the proxy-id config is:entry1: local 1.1.1.1 remote 2.2.2.2entry2: local 1.1.1.1 remote 2.2.2.3 The very annoying things the phase2 is partial UP, when "show vpn flow", either entry1 is active and entry2 is inactive OR entry2 is active or entry1 is inactive. Is this due to the incorrect co...

DongQu_0-1619102922750.png
DongQu by • L2 Linker
  • 7346 Views
  • 6 replies
  • 0 Likes

Backup and Restore PA Panorama and Firewalls setup to new infra in Azure

Hi friends, Want to setup a parallel infra for current production environment where current configuration should be used in new VMs(Panorama and Two Firewalls) . How can we export only current security policies ,objects, and import to new setup (manually creating 400 policies will be difficult) ?. New setup already have different basic configu...

VPN tunnel and NAT rules

I have to create a VPN tunnel between two businesses. The main objective is that company A needs to provide access to the following subnets to company B: 10.10.1.144/2810.1.2.144/28 I've got all the tunnel info set up, and there is just a public IP address on each firewall as the peer IP. For company A where the subnets are located, I'm struggl...

buck1 by • L1 Bithead
  • 16175 Views
  • 6 replies
  • 0 Likes

We want to hear your thoughts - Enhanced LIVEcommunity Experience

Now that the enhanced LIVEcommunity experience is live, we want to hear your feedback and also help address any questions you may have! Please use this discussion post to share your thoughts or ask questions. You can find a walkthrough of all of the enhancements made across the community here. Thank you for the continued participation and s...

agalindo by • L4 Transporter
  • 5302 Views
  • 1 replies
  • 5 Likes
  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks