General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4238 Views
  • 0 replies
  • 0 Likes

Not able to access the live community article

I am not able to access the live community article (https://live.paloaltonetworks.com/docs/DOC-2561)showing the error as access denied,This is the error which i received (you do not have sufficient privileges for this resource or its parent to perform this action.)

GideonKonga_1-1604216498330.png

Resolved! No Internet Access after Installing GlobelProtect 5.1.3-12

Hi,I had problems installing GlobelProtect on my Mac, thinking it was my Mac I've wiped the hard drive and installed a fresh copy of Big Sur 11.2, and have installed no other apps.Mac connected to home Wifi (also tested the below via Ethernet & iPhone hotspot, same issue) and Safari can browse the internet, reach our portal address and ping ...

New stix/taxii miner using cabby

I created a new stix/taxii miner for MineMeld, it can be found on github: https://github.com/mr-torgue/mmcabby.It was created because I encountered severel problems with the default taxii miner and the ng miner. In general mmcabby is more stable because it uses cabby (from eclecticIQ developers of stix/taxii). It also contains support for certif...

folmer by L2 Linker
  • 9739 Views
  • 8 replies
  • 0 Likes

log-card issue after upgrade 9.0.x

Hi, anyone faced an issue when upgrading from 8.1.x to 9.0.x (7050)after autocommit completed, cannot commit with the following error CommitResult : failedLog-card is required but not configured.Please fix and try again. Regards

Resolved! Azure : troubles with the azure-public-cloudIPsWithServiceTags Miner, same prefix in multiple Azure Regions

Hello, Using Miner "azure-public-cloudIPsWithServiceTags", I'm trying to get all the subnets from the Azure Region "switzerlandn". I am using a filter I found in this forum : - actions: - accept conditions: - azure_region == 'switzerlandn' - share_level == 'green' name: accept azure IP for region switzerlandn But it d...

CSavoy by L1 Bithead
  • 3266 Views
  • 1 replies
  • 0 Likes

Resolved! Changing the panorama service route without causing a revert

I am running into a problem and looking for any ideas or experience that may provide a solution. I have a firewall that is managed by Panorama and the service route for panorama is set to ‘default’. I want to change this route to communicate to panorama over an IPSec tunnel. This change causes a revert and I guess this is probably expected beha...

Dataplane goes restarted

i have a paloalto 3220 model After plug the new SPF all the interface port goes down as well as dataplane goes restart.Once i unplug the SFP again dataplane goes restartsAll the interface are goes downHA Logs: 2021-01-27 16:28:07.512 +0500 debug: ha_sysd_general_vers_string(src/ha_sysd_version.c:1835): Got new Threat Content: 8369-6522; for pee...

Domain joined PCs and user logoff events?

Hi all, I was reading in some of the documentation for User-ID to see if we can improve our security a bit. Basically, I'm currently setting User-ID logs to no timeout with the assumption that a new user login will generate a new one and override the old one. We've been doing this because a number of users leave their computers locked instead ...

jsalmans by L4 Transporter
  • 3790 Views
  • 2 replies
  • 0 Likes

Resolved! Predefined Firewall Report Error - No matching data found

Hello, Has anyone come across problems generating the predefined report with the error " No matching data found" as per the below? I have tried rebooting the management server, I have also confirmed that the predefined reports are all enabled I also do not see any specific errors in the system logs relating to reports. I am open to any suggesti...

Sarc845_0-1608287289337.png
Sarc845 by L2 Linker
  • 8066 Views
  • 5 replies
  • 1 Likes

User-Id Mapping / Ignore user list

Hello,I am running into an issue with Global Protect users due to remoting into other machines with other credentials. I have read extensive articles about the issue and understand that the firewall can only map one user name to an IP. That appears to be exactly what is happening., A user logs in and has internal connectivity, then logs into an ...

APP-ID: Target app and Depends ON APPs over more then one Security Rule! YES or NOT?

Hi There, I didn't find a real answer for the question, if its nessessary to add "Depends On" Apps in the SAME security rule or is it also possible to add this in the security rules before? Example for specific app and all "Depends on" in have to be in the same security rule:https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000...

fhu_omi by L3 Networker
  • 7537 Views
  • 5 replies
  • 0 Likes

Zone Protection drops traffic

We have below settings for our untrust zone protection. We don't see a high CPS rate but we still see packets getting dropped, and has now started effecting us. Any guidance would be helpful.PANO9.0.11/5250

image.png
image.png
image.png
raji_toor by L4 Transporter
  • 7849 Views
  • 9 replies
  • 0 Likes

Unexpect single port disconnection from PA-220

My client's PA 220 cannot reach to his gateway. However, after he has reboot his PA, the connection is back, but only for few hours long! No matter how I have add the MAC address and troubshoot the problem of the system. I have checked both port on therouter and the port on the PA. I have added the MAC address on the ethernet port. I have even ...

  • 24358 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels