General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 776 Views
  • 0 replies
  • 0 Likes

User-ID mapping limitation using RDP

Dear community,

 

We have a desired scenario where user_1 connects from machine_1 to machine_2 using rdp and login with user_2.

We´d like that the mapping of machine_1 associates with user_1 and machine_2 associates with user_2.

 

We are aware of the limi

...

Carracido by L3 Networker
  • 2383 Views
  • 1 replies
  • 0 Likes

Is Azure A Safe Place To Secure Data On Cloud?

I am planning to take Azure certification from one of the renowned training institute in Bangalore. I was reading some facts about Azure i.e Azure is a service provided by Microsoft which was initially known as Windows Azure. The function of Azure is

...

Resolved! A question about PA-3020

Hello, I've got a PA-3020, but I don't have license. What do I lose without the product license? Only support? I would like to know.

AKAMAI API for IP Addresses.

Hello All,

 

I have a customer that requested the information below:

 

"We have recently discovered that apple is moving to Akamai for services like App store and IOS updates.  Would you happen to know if Akamai has an API for the ip addresses so we

...

sodhegba by L2 Linker
  • 3498 Views
  • 1 replies
  • 0 Likes

GlobalProtect behaviour in Chromebook

Can anyone please confirm if below is the expected behavior of the GP Android App with internal gateway on Chromebook?

When inside the network with internal host detection GP greys out. Using GP 5.2.2

 

If GP greys out after connecting does this mean th

...

Resolved! Difference between app base rule and service base rule.

Hi All,

 

Just some queries,

 

1) what is the difference between the App base rule and Service base rule?

2) For security purpose which one is a more secure app or service base rule?

3) What is the benefit of using App base rules?

 

Thanks in advance.

Resolved! SSL Certificate renewal query

We got certificate tree like this:

the public certificate (Trusted root CA) from Digicert, Intermediate cert (Digi root) and then the SSL/TLS cert (DigiVPN). This DigiVPN is going to expire soon and we use it for GP portal and GW. The server cert is b

...

VPN Tunnel Monitoring between two Palo Alto devices

Hello,

 

From what I understand, when creating a tunnel monitor between two PA devices it's best to assign IP addresses on the same segment to the tunnel interface on each side.  The monitor is then setup with the remote destination on each side.

 

Examp

...

NobleNOC by L0 Member
  • 1923 Views
  • 1 replies
  • 0 Likes

Resolved! PA HA with Port-Channel towards inside/trust connection

Hi,


We need to add secondary PA-220 to existing (production) standalone PA-220 and make it has Active/Standby. Trust interface on PA will be trunk with two sub-interfaces. Both the PA trust interfaces are going to connect downstream Core switch. Core

...

PA-HA.png

Resolved! Export GlobalProtect MSI file

Is there a way to export a deactivated GlobalProtect client MSI installer from the firewall or download a version from the support website?  A client also has a palo alto firewall, but is on a different client version than what I use internally.  The

...

  • 23985 Posts
  • 115 Subscriptions
Top Solution Authors
Top Liked Authors
Labels