General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Customize Authentication Complete URL

Hi, i would like to customize the URL Authentication complete in GP. i was checking this KB: https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-user-authentication/set-up-external-authentication/set-up-saml-authentication/customizing-the-saml-cas-acs-landing-page The problem is that we dont have the option: ...

BigPalo by • L4 Transporter
  • 2702 Views
  • 6 replies
  • 0 Likes

Queries regarding .crx3 chrome extension

We are currently experiencing a significant increase in bandwidth consumption on our network due to users downloading .crx3 files, which are Chrome extension packages. Our Palo Alto Firewall does not natively recognize or allow us to block the .crx3 file type using the File Blocking profile, as this file extension is not currently supported in t...

Connection Failed unreachable macbook

Unable to connect in mac mini 06/29/2025 12:07:37:787 [Info ]: Started the Portal pre-login06/29/2025 12:07:37:787 [Info ]: CPanMSService::PreloginPortal CheckServerCert return 0x2000 06/29/2025 12:07:38:055 [Info ]: Portal pre-login result received06/29/2025 12:07:38:057 [Info ]: Portal Login starts06/29/2025 12:07:38:057 [Info ]: Failed to o...

DHCP Lease Issue

Device details: Model - PA 3020 Software version - PAN OS – 8.1.3 Problem Description: Please be informed that we are frequently encounter DHCP lease full (100%), and it cause interruption for our users at region side. Customer side have two vlan for DHCP lease which are vlan.960 (IP pool of XX.XX.XXX.X to XX.XX.XXX.XXX) and vlan.959(XX....

GlobalProtect - Multiple Client Settings

Following a change to move from LDAP (Local Domain Controllers) to Azure SAML with MFA enabled we are experiencing an issue with the use of multiple Client Settings Configs on a single Gateway. We use the users section to identify a subset of users that only require RFC1918 IP ranges to traverse the VPN and all remaining users will hit the sec...

PT1559 by • L0 Member
  • 2141 Views
  • 3 replies
  • 0 Likes

UnAuthorized Access

Dear, Anyone can help me to solve my account. " Your account has expired. To get this resolved, you must reach out with your Super User for assistance.You can click here to send your Super User a reminder notification." i have clicked to send a reminder notification but nothing happen Thanks you so much for your help

Congdoan by • L0 Member
  • 980 Views
  • 1 replies
  • 0 Likes

HTTP Header Referrer

Hi,is it possible to build a security access rule based on http-header referrer field?Someone have do it?Regards

mmcastr by • L1 Bithead
  • 6319 Views
  • 3 replies
  • 0 Likes

BGP Communities Import Rule

I have a BGP connection that is up. Let's say it is to peer 10.1.2.3, and my Peer AS is 1234 They have a community set that I want to match on in an import rule. Specifically, 1234:567 I know this is just an example, but the field simply says: "Community Regular Expression:" and does not provide me any examples how to configure it. I c...

birkhojk by • L2 Linker
  • 1379 Views
  • 1 replies
  • 0 Likes

Paloalto routing an IPSEC tunnel to another router

Hello, I'm trying to create a tunnel between R1 (OpnSense) and R3 (Sophos), R2 is the Paloalto that NATs a dedicated wan IP to interface1/2 (private TRUST LAN) where is locally connected the Sophos. R1 (Opnsense) <-----> R2 (Paloalto NAT 1:1) <-----> R3 (Sophos) I have setup all the IPSEC IKE2 tunnels on R1 and R3, on R2 i did ...

alexcoxie_0-1750750937204.png
alexcoxie_1-1750751072579.png
alexcoxie_2-1750751152487.png
alexcoxie_3-1750751174390.png

Automated backups from Panorama

Hi Guys I have a HA FW Palo Alto, which are managed by a PANORAMA. Is it possible to do the automated task, to send a BACKUP of the FW configuration, on a daily basis, but from the PANORAMA? The best option in this scenario, in your experience, is to send the backups from the same FW? Or is it better to do the configuration only from the PANORAM...

  • 24470 Posts
  • 125 Subscriptions
Top Liked Authors
Labels