General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

shared folder in clientless VPN

Dears, Is it possible to configure the shared folder in clientless VPN?Example:- I have one file server and i want to give access to users via clientless VPN. please share any documents for configuration.

Resolved! Active Active BGP AS Number

Have a Active/Active spit data center solution and question has been brought up if it is possible to use different AS numbers on each of the Palo's. My thinking is why have Active/Active, just use each Palo as a separate individual firewall at each DC. I'v never seen Active/Active Palo's having separate BGP AS numbers. It looks like it is possib...

Resolved! SSL Decrypt does NOT work with TLS 1.1 or TLS 1.2

Hello,I'm running a cluster of PA (4.0.8) with SSL Decryption configured.SSL Decryption is not able to decrypt SSL traffic if the HTTPS session is using TLS 1.1 or TLS 1.2.Test with www.gmail.com Chrome : OK (see gmail application in the traffic log)Firefox : idemIE 8 or 9 with TLS 1.1 or TLS 1.2 DISABLED : idemIE 8 or 9 with TLS 1.1 or TLS 1...

licenselu by • L4 Transporter
  • 23010 Views
  • 21 replies
  • 0 Likes

Palo Alto PA-3020 Won't Boot

I have a Palo Alto PA-3020 that I got from work a few months back, it was pulled in working condition a few weeks ago, but when I power the unit on the power LED lights up and the fans spin, but no other lights are on. I tried connecting to the unit via console but I can't seem to get console output, I've tried multiple USB to serial adapters bu...

Resolved! SSL Decryption and Security profiles

Hi I have a question . Currently PA 3020 cluster we don't have ssl decryption enabled . We plan to do it in March However , if we enable all other security features like AV,Antispyware File blocking , Vulnerabilty Protection , Wildfire etc , it wont be fully effective as all these Security profiles cant see what is going inside SSL unless we ...

add new local log collector in collector group

We are using standalone M-200 for 5 locations firewall and created collector group with single local log collector of M200. We are deploying our new M-200 at another location and it will be in HA with our existing M-200.This new M-200 will be Active-Secondary panorama and we will add local log collector of it in existing collector group. So in e...

Deepak_K by • L3 Networker
  • 1961 Views
  • 1 replies
  • 0 Likes

Layer 2 sub interface with vlan is not working

Hi all, I am trying to configure palto interface in layer 2 mode as trunk and Vlan interface as SVI. Interface interface type IP address Tag Vlan Sucurity zoneethernet 1/10 layer2 none none none Mgmt-Trust-L2I need t...

Resolved! IpSec Tunnel Up but not passing traffic

Hi all, I have "Inhand Ir611" Industrial Cellular Router and Palo Alto in office. I have configured Inhand router and i have reach to internet. Than i setup Ipsec Tunnels to my Office Palo Alto. Everything looking good after configuration and restart the device. I have check PA side. Tunnel Up and Ike Up i have two green dot in PA. But i can't r...

Lacrymae by • L1 Bithead
  • 8954 Views
  • 3 replies
  • 0 Likes

Techdoc resources not appearing in Live Community search.

Hello, First, my assumption is Technical Documentation is the same as Techdocs. Here's my scenario. I'm working in Prisma Cloud testing a workflow. I click the help (?) at the bottom right corner of the page and navigate to Other Resources - Get Help. It takes me to Live Community. At the Live Community page I want to find two resources:Integrat...

JBrooks by • L1 Bithead
  • 5980 Views
  • 4 replies
  • 0 Likes

alert action or default(alert) - No logs seen

Hello , I have created an Antivirus Profile The action i have set is Alert and not default(alert) . Similarly Wildfire Action in AV profile is also "Alert" However when i see Threat Logs and filter by ( subtype eq virus ); i cant see any log I can however see logs for subcategories spyware and vulnerability Also , i cant see anything Wildf...

Resolved! Query for DNS Security

Hello, In anti-spyware Palo Alto DNS security option, the default action was already on alert.We don't have DNS Security License.1. What should be the default action which I keep? Should I keep on alert or sinkhole?2. If I keep the action on sinkhole will it disturb DNS traffic?

can we mitigate CVE-2021-3031 PAN-OS by restricting dataplane interfaces of NGFW

CVE-2021-3031 PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random informati...

Deepak_K by • L3 Networker
  • 2474 Views
  • 1 replies
  • 0 Likes

MS-Teams Update Security Policy Help

Hello all, I'm trying to fine tune a security policy to allow MS-Teams to update; based on what I can see the logs, it seems to contact statics.teams.cdn.office.net for the update. I have created a single policy with that destination as a FQDN, allowing the usual ports and applications. However, the rule is never hit, it skips over it and hit...

COlson by • L2 Linker
  • 4897 Views
  • 3 replies
  • 0 Likes

Resolved! Alert action in Security profile

Hello , We are enabling Security features like Antivirus , Antispyware , Vulnerability protection , Filer blocking etc . We want initially to monitor the traffuc We are putting the action as " Alert " . Just wanted to confirm that it wont block anything ?

  • 24483 Posts
  • 125 Subscriptions
Top Solution Authors
Labels