This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Test URL -> Operation Failed: URL access error

Ive been reading this forum for similar problems, but seems I have different problem.I must say I had difficulties building this, but now this seems to be the last obstacle.So I got minemeld up and running and its able to get feed and I can access the URL https://"Server IP here"/feeds/o365-worldwide-any-url-feedThen I created new CA for the min...

LassiK_0-1615887365458.png
LassiK_3-1615890134113.png
LassiK_1-1615887417734.png
LassiK_2-1615887442645.png
LassiK by • L1 Bithead
  • 3775 Views
  • 1 replies
  • 0 Likes

Resolved! DNS proxy sharepoint domain issue when cache enabled

Hi there, i have some issues with my firewall when using dns-proxy with enabled cache. I cannot resolve sharepoint domains e.g. bitmix.sharepoint.com, but when I disable the cacheoption everything works fine.Does someone have any suggestion how I could solve this?I'm using PanOS 10.0.2

Chris.Ka by • L1 Bithead
  • 9808 Views
  • 9 replies
  • 0 Likes

Pallo Alto Version 10 show transceiver command for SFP check/troubleshooting

Before only the "show system state filter xxx" ( https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaMCAS ) was used to check issues with SFP but in version 10 the show transceiver is here and this is great 🙂 https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/monitoring/monitor-transceivers.html

URL Filtering Clarification - Wildcards behavior (implicit match on the rear of the URL)

Figured I'd share this here as I already have on another platform. Been using PanOS for ~8 years and came across something with URL filtering and wildcards. URL filters with wildcards will match on the front, and back of the URL(implicit), if you don't use the trailing /. What this means is *.microsoft.com doesn't just match www.microsoft.co...

Global Protect Split Tunnel exclude video traffic issue

Hi All,I have an issue I am not sure how to address. I have "Exclude video traffic from the tunnel" enabled on the GP gateway. When a user connects and tries to watch a video on our wordpress intranet site, http:/myintranetsite/somevideo embedded in the page, it kills the session in the browser. I get one of those "oops, something went wrong". W...

Resolved! Due to Open SSH Denial of Service vulnerability firewall dropping random connections

Hi Guys, Large number of connection attempts made which is normal as per the server team but firewall is considering it vulnerability and dropping the random connection to the server. After getting 3 to 4 successful execution in the same session it getting failed. error msg :org.apache.commons.vfs2.FileSystemException: Could not connect to SFTP ...

gasin1 by • L1 Bithead
  • 4861 Views
  • 3 replies
  • 0 Likes

Failover in NAT

We have a configuration to balance two NAT destinations, in the Translated Address we have a group with the two IP destinationWe need to performing a failover if NAT # 1 192.168.251.21 stops working, passing to NAT # 2 192.168.251.22.When the IP # 1 is turned off, so that it sends the traffic to IP # 2, it is still trying to go out on IP # 1Is t...

RodrigoB by • L0 Member
  • 3095 Views
  • 2 replies
  • 0 Likes

Resolved! Does Paloalto Firewall support autoconfig for IPv6 interface

In my environment, I have 1 ADSL router supply IPv6 prefix, It working well with my IPv6 laptop and can go through internet using prefix from router + generated interface id. Does Paloalto support autoconfig for IPv6 interface? I need it because my router random change global prefix.

Resolved! Panorama > Policies > Security > Post Rules > Zone field has a red background

Hi thereWhy does the zone in the screenshot appear with a red background?It is the same when browsing direct to the FW itself.There is an interface in the zone with a subinterface.Both main and subint are up.IP address configured on the subintThe interface which is a member of the zone is shown below:Any replies much appreciated

2021-03-24 15h15m53 Zone Red backgroud.png
2021-03-24 15h20m21-StdF Interface setup.png

Resolved! March Madness 2021

Have any new application signatures been released for March Madness 2021? I'm able to find the historical ones but have not seen any for 2021 yet.

bmeyer by • L0 Member
  • 3652 Views
  • 2 replies
  • 2 Likes

Resolved! Meraki to PAN Conversion?

Does anyone have any thoughts on doing an export/conversion from Meraki to PAN? There doesn't seem to be a direct conversion process so any help would be appreciated, I'd rather not completely build out the PAN if I don't have to.

Resolved! SSL Decryption Question PANOS9

Hi, i have one short question about PANOS 9 and 10 ssl decryption.We use ssl decryption on all PAs for many years.Is the rule 77 obsolet after upgrade to PANOS 9 /10??The rule was a must have for ssl decryption working on PANOS 7. Best regards,Chris

HW-ChrisME_1-1616593171357.png

Resolved! FW routing packets to internet vs internal

I have a weird issue with a LAB interface/zone that when packets to a cloud IP that is reachable via the core it routes it to the internet vs the core. All other traffic is routed correctly but not this and I can't seem to figure out why. 10.100.2.1 is my core, 10.100.99.1 is the lab interface on the PAN which is part of VR1 (only virtual rou...

drewdown by • L4 Transporter
  • 2427 Views
  • 1 replies
  • 0 Likes
  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks