This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! HA Cluster Network Topology

Hi Everyone, I'm new to Palo Alto and now I plan to deploy 2 Palo Alto 5250 in HA Cluster mode, each firewall take place in a Data Center. This two Data Center is in same City. That why I think HA Cluster suitable in this situation. These 2 new firewalls is replace for a Cluster Check Point Firewall. After reading all document about HA Cluster I...

QuangLe by • L1 Bithead
  • 12579 Views
  • 8 replies
  • 0 Likes

Lot of non-syn-tcp

Hi Experts,we have a lot (I mean a LOT :-)) of non-syn-tcp traffic on our PA5220 cluster. The PA is in an enterprise company. Are we sure that the non-syn-tcp means that there is an asymmetric flow? Let me give you an example: 1) Host A sends a SYN to Host B passing through PA2) PA recognize it properly and establish a sessione in its session t...

paboy1 by • L0 Member
  • 11310 Views
  • 2 replies
  • 0 Likes

Resolved! PA 5220 aho and dfa offload

Do i need to enable aho and dfa or not ? Running 8.1.9 on PA 5220 debug dataplane fpga stateaho offload not readydfa offload setupUse software only

MP18 by • Cyber Elite
  • 6957 Views
  • 7 replies
  • 0 Likes

Report of Number of concurrent sessions per day / month

Hi all, I was wondering if it would be possible to have a report that on a daily base (with a monthly overview) would should me the average amount of concurrent sessions for that period, based on a specific virtual wire or interface. I noticed that through the CLI I can get this information:show session all filter hw-interface ethernet1/1 count ...

Can't get Wildix phone book working - Source address shows as WAN IP not LAN IP!?

Hi all, where I work, we are having difficulty in getting the Wildix IP Phone Phonebook to work through our PaloAlto PA-220 firewall what we use for all SIP traffic. (Wildix is a make of IP phones we are using.) I keep seeing dropped traffic like the below (drop.pcap), which is strange as the source address is showing the WAN IP and not the LAN ...

PA and ASA n route mode

Hi,I have the below topology PA and ASA are in routed mode . The first question is the design is valid? I am facing a problem in this design ASA says the secondary is failed ,primary asa says the secondary and dmz zone interface failed Thanks

pa-cisco.jpg
simsim by • L4 Transporter
  • 2571 Views
  • 2 replies
  • 0 Likes

Secure web-GUI access for managment

Dears,When i log in my firewall it is showing the connection not secure. For secure connection login, i have gone through these documents and try to configure a secure connection for web GUI access. How To Configure A Certificate For Secure Web-GUI Access - Knowledge Base - Palo Alto Networks Procedure 1 I followed:-- Created a self-sign certif...

Jafar_Hussain_0-1606198282984.png

Panorama HA

Hi Experts, We've Panorama in HA mode running on 8.1 and due to some reason, secondary is now active. Once the primary is back, with the preemptive checked, primary is still passive. Can someone please assist why primary is still passive? Note: pls be noted preemptive isn't enabled on secondary(active now)

Global Protect issue with Windown server 10

The issue is that when I connected to a server through Global Protect, I can't connect to another server.I have to disconnect from Global Protect and then connect to the desired server. So basically he can connect to one server at a time.However, with Windows 10, version 1903 have no issue. But when I try to connect to Windows 10, version 2004 h...

Resolved! PA-2020 Update PAN OS 7.1.11 possible?

Good morning,we have a PA-2020 with sw-version: 7.1.11Can I update the software version to latest PAN OS?We want to use SAML 2.0.is there a way to achieve this? kind regards,Roland warten mit Login admin / admin show system environmentals ----Thermal---- Slot Description Alarm Degrees C Min C Max C S0 Temper...

SD-WAN internet link (DIA) monitoring

I have a PA-220 with dual ISPs (WiFi and LTE). I tried to configure SD-WAN for direct internet access (DIA). Both gateways (routers from both ISP) are localy connected via ethernet. As far as I know, SD-WAN pings the gateway IPs to calculated the link quality and because they are both locally connected, there is usually no issue. The troubles o...

Problem with routing of NATted reply packets over IPSEC tunnel

I have an IPSEC tunnel to another organisation, they have two endpoints at the other end on addresses which conflict with our networks. We can just focus on one to keep it simple. We have an IPSEC tunnel set up and passing traffic fine (tunnel.3 interface on the untrust zone).The external endpoint’s native address (at the other end of the tunne...

djr by • L4 Transporter
  • 5785 Views
  • 3 replies
  • 0 Likes

Resolved! SMB & Robocopy

Hi,I have server 2016 with all patches and I use Robocopy to sync files to the backup server. RC kill smb "server service" several times per day, no event log. Windows 10 clients cant access shares.The only solution is to restart the server. Can even restart server service, which stuck in stopping state. I like robocopy But, can't anymore use...

rasil66 by • L1 Bithead
  • 7434 Views
  • 6 replies
  • 1 Likes

GlobalProtect SMB file transfer results in error for large files

We have some users that need to transfer large files on-preemies. When copying files shortly between 5-20% data transfer this error is thrown. Files are MultiGig in size. Small file around 100M that I tested did not show this error. Copying to the same file share from within on-prem network does not give this error. I have tried changing mtu as...

image.png
raji_toor by • L4 Transporter
  • 5857 Views
  • 3 replies
  • 0 Likes

Setup Azure MFA with Global Protect - NPS/ISE

I am building this new but don't have concrete steps to start with. What I understand until now is that we need NPS extension for MFA to work with Azure. We last year moved away from NPS as our radius server to Cisco ISE. So do I have to figure out how to integrate ISE with Azure or do i have no choice but to implement NPS to get this working.

raji_toor by • L4 Transporter
  • 3839 Views
  • 2 replies
  • 0 Likes
  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks