General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1812 Views
  • 0 replies
  • 0 Likes

Which drivers are used in terminal service agent.

Hi,

 

What are the drivers are used in terminal service agent?

 

Following are the debug log and found error for drivers.

 

06/23/20 17:07:37[Info 331]: ------------Service is being started------------
06/23/20 17:07:37[Info 406]: Load debug log level Info

...

Resolved! WAN interface Multiple IP addresses or sub interfaces?

Hi - Looking for best practices advice on WAN interface. Currently the WAN interface has a /26 with multiple IP addresses for incoming web servers translated to different subnets behind the PAN.  Is there a default proxy arp working and is this the b

...

stoff by L0 Member
  • 7768 Views
  • 3 replies
  • 0 Likes

Resolved! policy is clear yet traffic is still DENIED

hi all, we have a policy that clearly states FROM and TO objects and SMB_override (custom app, I presume, created earlier) as the application. The service is configured as Application-default. As per Monitor, it goes straight through to the deny rule

...

igs1917 by L1 Bithead
  • 7090 Views
  • 5 replies
  • 0 Likes

Resolved! PA sending TCP RST for a NAT rule

Hi everybody,


Adding a bidirectionnal NAT rule for an ssl web server and the according security rule, connections from outside are dropped as "Incomplete". Traffic capture show that first SYN packet received is directly rejected by PA with a RST respo

...

Want to Uninstall .bat file Terminal Server Agent.

Hi,

 

While installing the VM the terminal server agent was installed through the .bat file.

Now our requirement has changed, I don't know how to uninstall the terminal server through the .bat file.

While Install the Terminal server agent this error is c

...

NAC VLAN Redirection failing

We are trying to implement a NAC solution. The basics are that the NAC is connected to the switch stack and upon sensing a device connecting, it checks it for authentication against the NAC and if it fail it quarantines it into a specific VLAN. That

...

Nonaxium by L1 Bithead
  • 5368 Views
  • 6 replies
  • 0 Likes

Certificate chain not correctly formed

Hello,

 

I am getting the warning below after importing a certificate. Is there a link/KB I can check to fix this?

 

Warning: certificate chain not correctly formed in certificate dc1pa.abcd.com.au

 

Thanks in advance!

Farzana by L4 Transporter
  • 9614 Views
  • 5 replies
  • 1 Likes

IKE Certificate Authentication Peer ID

Hi,

 

Im trying to setup a VPN connection using certificate based authentication. When Phase 1 tries to establish I'm getting the following error

 

Peer's ID payload ' IPv4_address:xxx.xxx.xxx.xxx' does not match certificate ID, Error: failed to get subj...

Are EDLs updating from passive device?

Dear community,

 

We´ve configured a couple of external dynamic list (IP and URL) on a local minemeld server and the passive device fails to fetch those lists.

 

Error obtained is: "Unable to fetch external dynamic list. Couldn't connect to server. Usin

...

Carracido by L3 Networker
  • 2997 Views
  • 2 replies
  • 0 Likes

HA1 and HA2 Links

Hi Guys,

I have configured each of my HA links to have backup links. I would like to know, are the backup links also sending and receiving traffic like port-channel in which both ports are active? Especially the HA2 if we want to have 20G or more link

...

Nikko by L1 Bithead
  • 2785 Views
  • 3 replies
  • 0 Likes

Resolved! GlobalProtect Split-Tunnel via cli.

I am trying to add the MS IP's via cli for split-tunnelling.

 

the documentation states the following...

set network tunnel global-protect-site-to-site <name> client split-tunneling access-route [ <access-route1>

 

but this is not working on 8.1.9

 

I can g

...

Mick_Ball by L7 Applicator
  • 6323 Views
  • 3 replies
  • 0 Likes

Resolved! updates.paloaltonetworks.com connectivity

hi all,

we have been trying to test our networks connectivity

to updates.paloaltonetworks.com and have been unsuccessful.

we tried ping to updates but it fails and also traceroute it also fails.

and when we tried from different networks all the coonectiv

...

Resolved! EDL dynamic list is URL access error

i  have created the new EDL  with this  URL  (http://panwdbl.appspot.com/lists/mdl.txtbut unable to fetch We have changed the service route with outside interface but the same issue was happening.

 

 

 

Joshan_Lakhani_0-1583264831448.png
  • 24241 Posts
  • 117 Subscriptions
Top Solution Authors
Top Liked Authors
Labels