General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

AWS VPN Tunnel and Path Monitoring

I have 2 AWS instances(Prod and Stage) each with redundant VPN tunnels to the same remote end Palo.  I setup path monitoring for each so that when one tunnel is down, the route is removed and the backup route is put in the FIB.  This only works with

...

eridavis by L1 Bithead
  • 3608 Views
  • 3 replies
  • 0 Likes

Delete GlobalProtect Client from firewall

 

On a PA-500 we locally downloaded the GlobalProtect client and activated it. Now we want to remove it from the firewall, because we are deploying it via our software deployment and the users should not be able to download it directly from the Porta

...

Tobi by L2 Linker
  • 4035 Views
  • 3 replies
  • 0 Likes

GlobalProtect configuration issues

We are trying to setup a new portal, changing some default app settings.

Although display traffic block message is selected to yes, it still does not display message although enforce-globalprotect is set to yes.

Also to exception-list i added few test

...

raji_toor_0-1593535500964.png
raji_toor by L4 Transporter
  • 1479 Views
  • 0 replies
  • 0 Likes

cannot export cert - failed to process command

No issues exporting other certs as PKCS12 or PEM w/ key

I have tried from multiple browsers on multiple machines - all same thing

When I enter passphrase and click ok. I download an error.txt that states "Failed to process command"

I tried reloading the

...

Sectigo CA Chain Decryption Issues

Due to the recent expiration of the Sectigo RSA CA cert (https://support.sectigo.com/articles/Knowledge/Sectigo-AddTrust-External-CA-Root-Expiring-May-30-2020) and our Palo firewall SSL decryption policy configuration to block expired certificates we

...

Resolved! Connect Palo Alto with Azure AD

Hi, It's possible make this integration? Is the same configuration like a Windows Server AD?, I didn't found any article that talks o explain this topic.

 

thanks in advance

 

Mats

PaloAlto Firewall - Onsite Spare Unit Ownership Issue

Dear,

 

We are planning the refreshment the Firewall, and this has an option for Onsite Spare Unit.

 

If we purchase the firewall with OnSite Spare (OSS), WHO is ownership of the OSS hardware (end-user customer or vendor/SI or PA)?

 

Thanks & Regards,

James

  • 23726 Posts
  • 104 Subscriptions
Top Liked Authors
Labels