General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

GP Authentication issues with Symantec VIP

Hi,We are running Palo Alto Global Protect with Symantec VIP MFA. We have run this for quite some time now and it has been stable until recently.We are seeing random errors appearing on one of the validation servers. It seems Palo is sending the request but Symantec is dropping it. A restart of the validation service on VIP EG fix the issue temp...

Firewall requests.png

Resolved! GlobalProtect Client Startup Windows 10

GlobalProtect Version 4.1.0-98PAN OS 8.0.10Login mode: on-demand Hi there, we've roll-out the GP-Software on everyone's PCs. Everytime a Windows (10) Client is rebooting the "GlobalProtect" pop-up Gui is showing up. Is there a way to stop loading the "GlobalProtect" pop-up Gui after rebooting Windows? Thank you.

Hodor by L1 Bithead
  • 70129 Views
  • 14 replies
  • 0 Likes

Newbie Question

Guys, I want to apologize in advance. I just haven't been able to find any information on this topic. I have our first brand new PAN firewall and I'm configuring it for use in a remote datacenter where we rent space and we will connect via site-to-site VPN. I got into the FW via the management port and I like the interface. I'm setting up th...

Resolved! File blocking for allowing specific file type to be download.

Hi guys, I have query regarding fileblocking where i just want to allow certain type of file to be downloaded and uploaded for specific file type. So for example. im allowing exe extension for microsoft.com and i provided the option to alert. And when i first made a request for the webpage it works as expected. But when i tried request for diffe...

OSPF route learning with Active/Active HA setup

I have an Palo Alto A/A HA configuration, each member with their own independent virtual router. The HA firewalls build an IPSEC tunnel to a branch Palo Alto firewall and have OSPF configured to advertise the HA firewall routes to the branch firewall, and the branch firewall to advertise it's local connected routes back to the HA firewalls. All ...

TomKisiel_0-1605971273887.png
TomKisiel_1-1605971683294.png

Resolved! Commit Error

While committing the policy we are getting the below error. Error reading signature DFA datafailed to handle CONFIG_UPDATE_START

SenthilM by L0 Member
  • 7132 Views
  • 4 replies
  • 0 Likes

Qos profile max bandwidth setting does not match qos interface statistics.

Hello Everyone, I have a question about qos and wana to confirm. I creat a qos profile and set maximum bandwidth 0.2 Mbps, after then apply it to network Interface that I want to qos. However, after finishing submit commit, I click the statistics of this interface, I see the class 2 “Maximum Egress(Mbps)” shown 0.78. I also do the same setting o...

certification

Hello Community my name is Abdullah and i belong a poor family can palo alto team provide a free certification.

ABSTYLE by L0 Member
  • 2071 Views
  • 1 replies
  • 0 Likes

Support Portal display name is incorrect

Hi All, I have a little concern such that in the support portal, when I tried to create a support ticket, my name is shown as the first part of my email. Even I updated the display name section, still it shows as earlier. Is it possible to reoslve this issue?

Udana by L1 Bithead
  • 3464 Views
  • 3 replies
  • 0 Likes

Resolved! Two GP portals with two different certificates

Hi,Was wondering if any one has run two server certificates for two GP portals having two different URLs? In theory it shouldnt matter, and the server will be presenting whatever portal the user selects. The gateways will be different and will also be using the same cert profiles as per their respective portals. Anything i need to watch out for?

SNI for GlobalProtect

Hi, is there a way for globalprotect to only listen to a specific URL and forward all other FQDNs?I already have webservers behind the palo listening to specific SNIs and would like to keep it this way.

CLIq by L3 Networker
  • 6608 Views
  • 3 replies
  • 0 Likes

OSPF Adjacency Issues

We've got a Cisco 7301 routers that forms OSPF adjacencies with an HA pair of 5020 firewalls. Recently I swapped this router out with a different router with the same IPs but different configs to test a new WAN connection. OSPF forms up just fine with the new router. After testing concluded and swapping back to the old router OSPF freaks out....

aglej by Not applicable
  • 24960 Views
  • 14 replies
  • 0 Likes
  • 24381 Posts
  • 123 Subscriptions
Top Solution Authors
Top Liked Authors
Labels