This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

API to dynamically register and tag from Panorama to Firewall

I'm finding we can use the api to register IPs to Tags on panorama no problem. I can view that they are registered on Panorama. However, Panorama is not pushing these mappings to the managed firewalls. I'm matching on name and I'm using the dynamic group in a policy on that firewall. What actually kicks panorama to push a registered IP...

Sec101 by • L4 Transporter
  • 2596 Views
  • 1 replies
  • 0 Likes

Dynamic user group using HIP log

Hi Team, Just need to check if anybody faced the below issue in PanOS 10.0.xI am trying to create a dynamic user group with HIP log by following settings,1- created one Tag2- Configured log settings for HIP log for build in action tagging the source user with the tag created before3- created a dynamic group with the above tag as match criteria. ...

How does Validate Commit function work in PAN OS 9.0.9?

I'm wondering if the validation process is checking the change against the running config and not taking into account the Interface IP change in the candidate config while doing the validation. I am trying to make a change to both the IP address of the outside interface and the associated default static routeWhen a validate commit I get the foll...

Configuring decryption, some gray categories and experiences

So I guess I'm just curious what the overall opinion of multiple people is regarding decryption and how well they take into account local laws, etc.I get decrypting traffic can be a major step up in security and basically unlocks a lot of potential in a shiny expensive new firewall. however there's always of course some debate.so baseline:I live...

Resolved! Facing issue with panorama on device group and template

On the device group panorama setting added wrong template. Now, while changing the device group name the commit is failing. Need to know how to resolve this issue. Because of this wrongly configured after committing the configuration unit 1 configuration is pushing to unit 2 and unit 1 configuration pushing to unit 2., both firewalls are ind...

WhatsApp Image 2021-03-20 at 6.19.48 PM.jpeg

Local Checks Not Enabled (info)

As per VAPT done at our firewall found below vulnerability :Please suggest any solution =====================================================================================Local Checks Not Enabled (info)Local checks were not enabled.Scanner did not enable local checks on the remote host. This does not necessarily indicate a problem with the...

how to block malicious Attack on server

Hi All, Good day!I'm trying to block malicious attack on our server but no luck. Please see below attack i encountered on server. I've already create a policy for that attacked. I already set security profile for that specific servers.Also i already install the latest dynamics updates. I hope you can help me on my problem. Thanks in advance. Tha...

jalorente_1-1616210194515.png
jalorente_2-1616210294296.png
jalorente_3-1616210430668.png
jalorente_4-1616210522914.png

Panorama is dropping lot of traffic to syslog splunk

I have a active-standby panorama cluster version 8.1.17 that manages about 40 firewalls. The active-cluster panorama is also a log collector-group.20 firewalls send traffic/threat/URL logs to active panorama and the other 20 firewalls send traffic/threat/URL logs to the standby panorama. From there, I configure panorama to forward these logs t...

dtran by • L4 Transporter
  • 9266 Views
  • 9 replies
  • 0 Likes

Facing issue with SSL VPN with Particular ubuntu machine(Linux)

Dear Friends, Hope you are all doing good!!! I am facing issue SSL VPN for particular ubuntu 14.0 user. Here is my findings and observation below:================================ ++ Customer having 4 diff ISP provider++ The user was in full tunnel mode in GP VPN.++ Out of 4 ISP only one ISP ubuntu14 machine getting connected with GP VPN and able...

Resolved! Missing some health status of PA-220 managed devices in Panorama

Hi all, After I uprageded all PA firewall and Panorama to version 9.1.5. My PA-3220 is working properly but not for PA-220. The operation is working fine but health information on Panorama for PA-220 is missing as capture below Infomation like CPS,session, CPU utilization and etc.. are missing but connectivity between PA-220 and Panorama is see...

image.png

GlobalProtect & SCCM

Long story short, we purchased GP and configured rules etc to allow SCCM traffic to and from VPN clients who are users working from Home. We are struggling to release applications or updates to these users and would like to know if anyone has GP with SCCM configured and working? Someone mentioned on a Palo FB forum, that pre-logon should be set...

ColonelHawx_0-1591016150266.png

GlobalProtect MTU Size

Hi All, I have an issue where GlobalProtect VPN clients are enable to establish a VPN tunnel when connected to a certain WiFi network. We have narrowed the issue down to the MTU size. Ther are various GRE tunnels and IPSEC tunnels which have reduced the effective usable MTU size to about 1236. Is there a way to change the MTU size on the Global...

Resolved! M200 log collector Panorama issue

Hi, I'm trying to add a M200 log collector as a Managed Collector to our central Panorama management. When I add by serial number it lists it by its serial number but not other info is pulled in and I can't add it to a collector group etc. It does have the basics configured and I can ping it from Panorama etc. but no joy in terms of central mana...

StuartS by • L1 Bithead
  • 2513 Views
  • 1 replies
  • 0 Likes

Resolved! COMPATIBILIDAD DE TRANSCEIVER AVAGO AFBR-709SMZ

Hola,Si alguien puede ayudarme, tengo este modelo de transceiver AVAGO AFBR-709SMZ, y en la documentación me figura que está fuera de AVL y que no está disponible. Sin embargo fueron los que llegaron con los FW's. Aún así, ¿puedo usarlos y no me traería ningún inconveniente en su funcionamiento?. Gracias.!!

GariHiroshi_0-1616073617402.png
  • 24394 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks