General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 778 Views
  • 0 replies
  • 0 Likes

Rules audit

Hello all,

I am looking for firwall hardening rules auding. what should be in consideration and i have only GUI view privilege's.

Regards

raoali by L0 Member
  • 1937 Views
  • 1 replies
  • 0 Likes

Antivirus Policy - Action based on Severity Level

Hey All,

we have Antivirus policy in place and we are seeing many, what we believe are, false positives. Mostly on PDF files. Since number is rather high, reporting each one seems a bit excessive. What they all have in common is their severity which i

...

Resolved! Layer 2 Virtual Wire and Layer 3 in on PAN

The network I inherited has a Cisco ASA and a PAN 3220 operating as

a virtual wire in serial. The NATs and most of the ACLs are at the ASA

while the PAN takes care of other protections such as geo blocking, 

correlation alerting and so on.

{Internet}--[E

...

palomed by L3 Networker
  • 3278 Views
  • 1 replies
  • 0 Likes

IPSEC VPN intermittent issue

HI,

 

I have IPsec vpn tunnel between Palo alto to cisco asa, tunnel is UP however it disconnect intermittently. Is there any way to check reason behind disconnection in logs? I have applied path monitoring but it show only UP and down logs not exact c

...

Live community email DMARC issue

Notification emails that I normally get from the Live community are failing DMARC checks which is causing them to be quarantined.  Their DKIM appears to be invalid and SPF is also failing.  This has been happening for probably a week or so.  I've bee

...

cchaffee by L1 Bithead
  • 2422 Views
  • 1 replies
  • 0 Likes

Probably a Stupid Question Tagged Interface

This is probably a stupid question, but if I just create another Layer-3 sub-interface off of an existing physically connected interface, and TAG that sub interface, that is all I need to do to bring a tagged trunk in through an existing physical con

...

birkhojk by L2 Linker
  • 1838 Views
  • 1 replies
  • 0 Likes

Resolved! Fail to fetch EDL form Cortex XDR on PANOS

Hi all,

 

I have followed on the KB (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmqFCAS) but still no luck to fix the issue. service route is using default and certificate Profile is using Root CA as well

 

 

 

 

2020-10-22 23...

Tutchapon_0-1603383292438.png
Tutchapon_1-1603383342710.png

Resolved! LDAP Server Profile - Retry Interval clarification

In configuring an LDAP server profile there is an option labled, "Retry Interval" 

 

I understand that the default retry interval is 60- but what does this do ? if I had 2 or more LDAP servers in this profile, would it cycle through each of them instan

...

kdruet by L0 Member
  • 2884 Views
  • 1 replies
  • 0 Likes

IPSec S2S VPN between Palo Alto and Sophos XG

Hi,

 

I'm trying to set up a S2S between Palo Alto Sophos XG and so far it's been unsuccessful as Palo Alto is not able to find a suitable proposal for the connection.

 

I've also tried the following the KB here. (https://www.sophos.com/en-us/medialibrar

...

  • 23986 Posts
  • 115 Subscriptions
Top Solution Authors
Top Liked Authors
Labels