This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Having issues with GoDaddy redirect sites from IP 184.168.131.241

Is anyone having issues behind your Palos accessing any websites the use Godaddy's IP 184.168.131.241 as a redirect? Website example http://www.rootworkers.com/http://sccforme.com We are experiencing incomplete connections. I also have a SonicWall and it is also not letting me access any site that redirects from that IP address.

Resolved! Enforcing Global Protect Connection Issue

Hi All, Has anyone who's implemented the Enforce Global Protect connection option had issues permitting remote support applications? I've tried adding the required wildcarded FQDN's to the Global Protect Portal under App Configurations but no joy yet. Just wondering if anyone else has had a similar issue?

Josh990 by • L2 Linker
  • 8892 Views
  • 12 replies
  • 0 Likes

Terminal server user identification

Hello.We have terminal server in which there are many users logged in.But we see them in traffic monitoring only as one Ip address and no separate users.I have installed terminal service agent on terminal server and everything is ok.IT shows connected and green and TS agent define the users.But in firewall i cant see the separate users in monito...

Radmin_85 by • L4 Transporter
  • 8776 Views
  • 13 replies
  • 0 Likes

Can you use DHCP reservation information to map USER-ID?

Weird question....but have to ask. Small Office networkNo ADUse PA220 as a DHCP Server for users (even mobile devices).DHCP Reservation Table has all the information that I think USER-ID could use.....is there a way to make this happen? thought about trying to forward a log file out of Management Interface to the Trusted interface.....but just s...

thartman by • L0 Member
  • 6770 Views
  • 4 replies
  • 0 Likes

Resolved! SYN ACK RST Loop on inside and SYN ACK only - source port re-use - hung session

I have had this happen twice so far, I am wondering how others have solved for it. Host A -> Palo Alto -> Host B Host A, cycles through its source ports frequently - every couple of minutes.Host B has long or no TCP keep alive timers. Host A:src port X connects to Host B on port 443.Host A has an issue, reboots, lost power, app crashes, e...

Not able to access the live community article

I am not able to access the live community article (https://live.paloaltonetworks.com/docs/DOC-2561)showing the error as access denied,This is the error which i received (you do not have sufficient privileges for this resource or its parent to perform this action.)

GideonKonga_1-1604216498330.png

Resolved! No Internet Access after Installing GlobelProtect 5.1.3-12

Hi,I had problems installing GlobelProtect on my Mac, thinking it was my Mac I've wiped the hard drive and installed a fresh copy of Big Sur 11.2, and have installed no other apps.Mac connected to home Wifi (also tested the below via Ethernet & iPhone hotspot, same issue) and Safari can browse the internet, reach our portal address and ping ...

New stix/taxii miner using cabby

I created a new stix/taxii miner for MineMeld, it can be found on github: https://github.com/mr-torgue/mmcabby.It was created because I encountered severel problems with the default taxii miner and the ng miner. In general mmcabby is more stable because it uses cabby (from eclecticIQ developers of stix/taxii). It also contains support for certif...

folmer by • L2 Linker
  • 10213 Views
  • 8 replies
  • 0 Likes

log-card issue after upgrade 9.0.x

Hi, anyone faced an issue when upgrading from 8.1.x to 9.0.x (7050)after autocommit completed, cannot commit with the following error CommitResult : failedLog-card is required but not configured.Please fix and try again. Regards

Resolved! Azure : troubles with the azure-public-cloudIPsWithServiceTags Miner, same prefix in multiple Azure Regions

Hello, Using Miner "azure-public-cloudIPsWithServiceTags", I'm trying to get all the subnets from the Azure Region "switzerlandn". I am using a filter I found in this forum : - actions: - accept conditions: - azure_region == 'switzerlandn' - share_level == 'green' name: accept azure IP for region switzerlandn But it d...

CSavoy by • L1 Bithead
  • 3407 Views
  • 1 replies
  • 0 Likes

Resolved! Changing the panorama service route without causing a revert

I am running into a problem and looking for any ideas or experience that may provide a solution. I have a firewall that is managed by Panorama and the service route for panorama is set to ‘default’. I want to change this route to communicate to panorama over an IPSec tunnel. This change causes a revert and I guess this is probably expected beha...

Dataplane goes restarted

i have a paloalto 3220 model After plug the new SPF all the interface port goes down as well as dataplane goes restart.Once i unplug the SFP again dataplane goes restartsAll the interface are goes downHA Logs: 2021-01-27 16:28:07.512 +0500 debug: ha_sysd_general_vers_string(src/ha_sysd_version.c:1835): Got new Threat Content: 8369-6522; for pee...

Domain joined PCs and user logoff events?

Hi all, I was reading in some of the documentation for User-ID to see if we can improve our security a bit. Basically, I'm currently setting User-ID logs to no timeout with the assumption that a new user login will generate a new one and override the old one. We've been doing this because a number of users leave their computers locked instead ...

jsalmans by • L4 Transporter
  • 4027 Views
  • 2 replies
  • 0 Likes

Resolved! Predefined Firewall Report Error - No matching data found

Hello, Has anyone come across problems generating the predefined report with the error " No matching data found" as per the below? I have tried rebooting the management server, I have also confirmed that the predefined reports are all enabled I also do not see any specific errors in the system logs relating to reports. I am open to any suggesti...

Sarc845_0-1608287289337.png
Sarc845 by • L2 Linker
  • 8475 Views
  • 5 replies
  • 1 Likes
  • 24462 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks