General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 383 Views
  • 0 replies
  • 0 Likes

Resolved! VPN Proxies

I have a VPN tunnel which is up and running.  In the tunnel, I have 2 proxyID's which have the same local address but different remote addresses.

I can only get 1 proxyid to connect. 

As an example, I current have proxyID1 connected and I can ping the

...

Resolved! DNS Security service

Hi All.

Can any body know if the DNS Security Services have possible to enable and subscribe on Virtual Wire deployment?

Thaks

 

Rojaba by L0 Member
  • 2054 Views
  • 1 replies
  • 0 Likes

IPSec Tunnels BGP Fluctuation Frequently

Hi All, 

 

We have 04 IPSec VPN tunnels created on our PA FW with Public Cloud configured with BGP. (All these 04 Tunnels are created over single Internet link). All 04 peering IP of public cloud belongs to same region.

 

Pl note that these tunnels are i

...

Jimmy20 by L2 Linker
  • 2047 Views
  • 1 replies
  • 0 Likes

iOS Global Protect Always-On VPN ?

We have:

 

MDM: Filewave

iOS: 12+

GP: 5+

 

When an iPad is rebooted, GP doesn't auto reconnect & must manually be opened/connected again.  Any ideas how to get it to actually always auto reconnect?  We really only care about the user identification being a

...

Resolved! User identification in security policy

Hello,

 

I have a problem with configuration of user identification in security policy. What is the target: for some users who login to VPN via GlobalProtect I would like to limit them to some specific subnet. Users login to VPN using their Active Dire

...

Resolved! Need to Disable TLS 1.0 & 1.1 for port TCP-3978

Can someone suggest on how can we disable TLS 1.0 & 1.1 for port TCP-3978

 

Description: The remote service accepts connections encrypted using TLS 1.0. TLS 1.0 has a number of cryptographic design flaws. Modern impleme
ntations of TLS 1.0 mitigate thes

...

A statement about using Pinterest in a URL category.

Hello! somewhat new to the community, I used to have a login but didn't login forever...

Just something that you might want to know if you are ever forced to add pinterest to a custom URL category, you will also need *.pinimg.com in the category to ma

...

Burnsy30 by L0 Member
  • 2757 Views
  • 1 replies
  • 1 Likes

MFA Authentication

I need to configure MFA for administrator login, we would prefer second authentication through e-mail  or any mobile APP token.I am unable to find exact document to configure , could you please help us to configure MFA in our Paloalto device.

Resolved! Panorama - deleting part of a template?

When i import my HA pair of firewalls into Panorama (9.1.3), the resulting template includes values for HA config. I would like to leave HA config up to the gateways themselves and not include it as part of the template.  How would i delete that part

...

Troubleshoot/debug scep

Our pki team has setup a scep/ndes server for us to use for new firewall we setup. The error i get in the gui is not saying anything. If I would like to start a debug on the firewall cli for scep. Where do i do that?

hbalzac by L3 Networker
  • 2797 Views
  • 1 replies
  • 0 Likes

Panorama version 9.1.4

Since i can see the stable version mentioned for panorama is 9.1.4,but when i go to support portal under panorama base images to download 9.1.4 i cannot the file...i am looking to install it on vm/esxi.

 

Let me know the stable version from 9.1.x and 9

...

Swetang by L1 Bithead
  • 1866 Views
  • 1 replies
  • 0 Likes

Resolved! Global Protect Client Preferred Release?

 

We are currently looking at updating our global protect client and would like to get some guidance on what version we should be updating to, ideally a client that may support MacOS Big Sur when it is formally released. With the global protect client

...

  • 23837 Posts
  • 112 Subscriptions
Top Liked Authors
Labels