This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Registering a PA-850 (won't allow me to register the device)

Hello everyone, My company recently purchased a used PA-850 from an Ebay listing. I have been trying to register the device so I can update the OS Version. However, when we attempt to register the PA-850, the system throws an error saying it is unable to find the serial number. Is this because the device is registered to another account alread...

How to force GlobalProtect user to always connect to portal

Hi Guys, For couple of reasons, recently I started to think - Is there a way to force the users to always connect to the GP portal first and don't use saved gateway config? I have noticed that we have lots of users connecting straight to the GP gateway and haven't been connected to GP Portal for days. I am trying to figure out a way to force the...

Not able to push and commit from the panorama.

Dears,I have added my firewalls in a panorama. but sometimes i am getting the below commit error:- VPN-SSL is not a newly created object. it was there since i added the firewall in the panorama. And the issue occurs intermittently.Panorama version - 9.1.2Firewall version- 9.0.8 your suggestions appreciated.

Jafar_Hussain_0-1608100763099.png

Múltiple Proxy ID PAN - Migration from FG using group address.

Hello guys! I'm on a manual STS VPN homologation from fortigate, and I have address pools declared in the encryption domains, which translates to too many proxy id's for palo alto, is there any way to configure this without having to generate so many proxy id? I know you can't use groups, but can you do something with variables or any ideas? Tha...

Edge Not Displaying Images With Palo Alto Networks Generated Page

Recently our Network guys implemented a Palo Alto firewall and we have started using it to block content. For instance a user tries to go to a gambling website and they get a blocked message that has a couple of images that are hosted on a different IIS based web server but the main page itself is hosted on the Palo Alto.IE and Chrome display th...

Techsupport file not generate

when i generate the tech support file from GUI it's start after we min the loading process is remove and failed to generate the tech support file and we cannot see on GUI PAN-OS version : 8.1.9 Please advise

Syslogs vs. Traffic Logs in Monitor

Good evening, I am working on a project that requires the use of threat logs and traffic logs of an institution with which I am affiliated. Our security manager can provide me access to our threat logs via the Monitor tab in PAN-OS. However, we are experiencing difficulty finding the traffic logs I need. I am looking for specific traffic logs, i...

Can get a User-ID table via XML-API on Windows UID agent?

Hi everyone, I can get a User-ID table via XML-API on a firewall for checking that the user authenticated and do something such as logout a user.I need to use a UID agent for doing it. Can get a User-ID table via XML-API on Windows UID agent? I haven't found any documentation about XML-API on UID agent. Thanks,Tin

Tinkani by • L1 Bithead
  • 2151 Views
  • 1 replies
  • 0 Likes

Panorama with virtual system

The issue is when we try to connect the firewall “with four virtual systems” to panorama, not all zones imported on the panorama.Zones working fine with two virtual systems and not imported all zones on the other.If we try to create it manually on panorama there is an operation failed to tell us the zone is already in use.We try to delete the fi...

Firewall syslog timezone

From my understanding, the timestamp within syslog messages from the Palo Alto firewall are based on the time zone configured on the firewall. However, the syslog message does not include what that time zone is, which can cause problems for SIEMs and other log ingesting devices. Is my understanding of this correct? And if so, is there a way have...

HIP profiles for internal outbound traffic

Hello Community, I hope you are well. I need to apply our security posture for internal user browsing. I would like to know if it is possible to apply HIP profiles for internal users (not vpn ssl connections). Just installing Globalprotect on the workstations is enough to collect the host information ?. Thank you !

Resolved! Problem with Panorama pushed updates

Hello all, i have problems with the security policy push.When i try to push them the commits fails with : . Validation Error:. rulebase -> security -> rules -> ms-ad -> destination 'offices-subnet' is not an allowed keyword. rulebase -> security -> rules -> ms-ad -> destination offices-subnet is an invalid ipv4/v6 address...

stef by • L2 Linker
  • 14281 Views
  • 10 replies
  • 0 Likes

Resolved! Palo Alto SSL Decryption Question

Hi All, I'm looking to subject ssl traffic to my security profiles, but to do this, I believe I am understanding that for inbound traffic from the outside, you need to import the same certificate and key from each of your protected servers on the inside network into the Palo Alto. Is that true? If so, why? I don't really understand why the Palo ...

  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks