General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 312 Views
  • 0 replies
  • 0 Likes

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 985 Views
  • 0 replies
  • 0 Likes

Geo Blocking problem

 
 

Hi, I am using Palo Alto (PA) firewalls hosting Software Version: 8.1.17 in AWS and need to configure Geo-Blocking so that only GB (United Kingdom) requests are permitted and all other requests denied. 

 

The infrastructure setup is as follows:

FQDN =

...

security policy source 1.PNG
security policy source 2.PNG
PA_1.PNG

Interzone Static Routing

Hi all, I'll preface this as I'm the sole networking guy at my job and I'm still green. Apologies for any dumb questions, I've tried to read the manual for relevant info and used my google-fu to no avail.

 

I'm using a PA-3020 on firmware 8.0.6.

 

I've b

...

error user in group mapping

Hello, 

 

After upgrading to 8.1.X > 9.0.X > 9.1.x. we found that some ldap users do not check per user policies, only for ip politicies.  

 
The firewall has no user-id configured, only tree server ldap.
 
we check that the firewall recognizes the Ldap tr
...

BigPalo by L4 Transporter
  • 4153 Views
  • 6 replies
  • 0 Likes

Resolved! Error when creating PBF Policy - IP does not match subnet

I want to create a PBF Policy in order to route traffic from one zone/interface destined for the Internet to a transparent intercepting squid proxy in another zone/behind another interface. Using a destination nat policy seems to work, but some other

...

daubsi by L1 Bithead
  • 6556 Views
  • 4 replies
  • 0 Likes

Resolved! Device Certificates Intermediate Cert

Hello,

On Device>Certificate Management>Certificates - I have a IntermediateCert, under the RootCert, that is expiring. I can easily renew it, (It's self signed), but I'm trying to understand what its being used for. I haven't found any information th

...

roma by L2 Linker
  • 2957 Views
  • 1 replies
  • 0 Likes

Resolved! HA2 link down

The 20G link for HA2 between the two PA-5220 firewalls (Active-Passive cluster) does not work correctly. It is a direct link using single-mode fiber and 10G-LR optics with a length of approximately 550 meters.

After restarting any of the two firewalls

...

BigPalo by L4 Transporter
  • 18669 Views
  • 7 replies
  • 0 Likes

Outlook 2016 unable to open while on GlobalProtect

Anyone else experiencing issues with Outlook 2016 being unable to open while on GlobalProtect?  We have sporadic windows 10 pc's with this problem and all windows 7 pc's have this issue.  When we disable GlobalProtect and start Pulse Secure (our lega

...

jmurphy by L2 Linker
  • 6973 Views
  • 5 replies
  • 0 Likes

Expedition 1.1.83 hangs during xml export

I'm trying to complete a cisco ASA to Palo Alto migration but Expedition seems to hang during the generation of the xml output. I've restarted jobs and task manger multiple times as well as updating Expedition and rebooting the vm itself. Below is th

...

google searched blocked

I have an issue that seems to only be affecting one user. They seemingly randomly get the block page when doing a google search. Looking at logs most searches are allowed but then I will see the occasional block-url. I think I have narrowed it down t

...

Resolved! GlobalProtect - Connecting before pre-logon

Hi Everyone,

 

We are experiencing an issue with some of our Windows 10 laptops where if the user connects before the pre-logon tunnel establishes at the Windows logon screen, then they are presented with a Global Protect error saying 'VPN Connection c

...

Geroge by L1 Bithead
  • 9461 Views
  • 7 replies
  • 0 Likes

Global protect client not connecting in win10-1909

Hi all,

 

We are facing issue with  global protect client 4.1.12-3

After windows 10 update 1909 patch.  Not able to connect to any gateway.

It not getting any error. After entering credentials in global protect page page is disappearing.

 

Please help. Any

...

Resolved! Globalprotect Portal failure

I tried to replicate a Globalprotect portal setup from another site and it fails with the following message:

 

  • GlobalProtect portal(Kawailoa_Portal) setting is invalid: auth-profile exist(method none), client-cert-profile none(no username).
  • (Module: ssl
...

GIT_Sean by L1 Bithead
  • 9994 Views
  • 7 replies
  • 0 Likes
  • 24040 Posts
  • 115 Subscriptions
Top Liked Authors
Labels