This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Aggregate vs Zone protection profiles

We have separate zone protection profiles for each zone. And the definition of aggregate says that "all thresholds apply to the entire group of devices specified in a DoS Protection policy rule". So if we are trying to protect servers in DMZ, unless we use smaller groups (for which our environment doesn't seem to have a usecase). Do we even need...

raji_toor by • L4 Transporter
  • 3394 Views
  • 3 replies
  • 0 Likes

Panorama Version 10.0.1 Cant see Traffic logs from Palo-Alto Device

Hi Guys,Devices:1. Panorama Version 10.0.1 Model VMware ESXi2. Palo Alto Cluster Active/Passive Version: 10.0.1 Model: VMware ESXi VM License: VM-100 Problem:Logs that send from Palo alto to panorama cant be seen under the monitor Traffic tab and cant be sent to the Syslog server.directly from the Palo alto, we can see the logs under monitor tab...

pan.JPG
pan2.JPG
itaymel by • L0 Member
  • 4392 Views
  • 3 replies
  • 0 Likes

Temporary disable Miner / Malwaredomainlist offline

Hello! Does anybody know how to temporary disabel a miner without deleting it from config ? Problem is, that currently www.malwaredomainlist.com gets resolved to 127.0.0.1 and the miner alerts in the log files with basepoller._poll ERROR: Exception in polling loop for Malwaredomain_IPs: HTTPSConnectionPool(host=www.malwaredomainlist.com, por...

HA sync option not showing in Panorama

Hi Team, I import the configurations from managed device to panorama then export to managed devices of our A/P firewalls. everything went well. but when I see the summary on panorama passive device template showing as in sync but active device template disappear. PFA below for your reference,

Resolved! Managing Windows Services

Ok, so this may be a stupid question, but I have a server that has a web service running under a domain\webservice account. I want to define a security policy for the service, but the firewall does not consistently get the correct user. After a reboot the user is right, but if I sign on to the box the user becomes me instead. I have tried the...

Pre-Logon Issue

Hi Team, I have configure the Pre-Logon but it's not working (T5208) 10/26/20 14:04:11:874 Debug(9110): SSO password is empty(T5208) 10/26/20 14:04:11:874 Debug(2462): m_preUsername pre-logon(T5208) 10/26/20 14:04:11:874 Debug(9070): Password is empty.(T5208) 10/26/20 14:04:11:874 Debug(2483): CheckCachedPortalForPrelogon 0, PrelogonNeedTimeout...

user based policy not working even if the log shows correct username.

Hi Team, I am facing an intermittent issue as follows.- I have a policy based on the username in domain\username format (Domain in NetBIOS name).I can see sometimes user traffic is not hitting this policy, but the traffic log shows with the correct username (domain\username - hope this eliminates the chance of domain normalization issue).-As the...

Split tunneling issue for office 365 applications

Recently enabled split tunneling for our Global protect VPN, and have added some domains into the split tunnel. For some users domain split tunneling doesn't work. The domains configured to be included in the split tunnel are as follows *autologon.microsoftazuread-sso.com*enterpriseregistration.windows.net*.microsoftonline.com We are trying to a...

Resolved! Upgrading heavily used PaloAlto Firewalls

Hi, I am about upgrade some PaloAlto firewalls with 10s of Vsys but wondering what would be a good report to generate to identify traffic flows for pre and post checks as well as identifying impact to services. any help will be appreciated. Regards,

qasim02 by • L2 Linker
  • 7180 Views
  • 6 replies
  • 0 Likes

Resolved! GlobalProtect Max tunnel count ?

HiI'm doing a global protection test.And we created the External Gateway and the Internal Gateway.And for the Internal Gateway, we didn't set up the Tunnel.If so, wouldn't it count to the Globalprotect Max tunnel provided by the equipment?In case of External Gateway, I think it will be applied to the count because it uses Tunnel.However, I don't...

Several subnetworks through the tunnel between Palo Alto and Mikrotik

Site 2 site allows only two networks to be pulled inside the tunnel (one of them behind the mikrotik and the other one behind the palo alto).I’ve tried different settings and it doesn't help.Has anyone had experience building a tunnel between them based on GRE tunnel over IPsec?Several subnetworks need to be passed through the tunnel.

melnikov by • L1 Bithead
  • 8306 Views
  • 7 replies
  • 0 Likes

Error while checking Dynamic Updates on Panorama 10.0.1

Hi, Panorama can reach out internet but when checking the updates we are getting a message says "Error while trying to read upgrade info. Please try again later". I did follow https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkuCAC , and it seems everything is fine on panorama. Is there anything else I need to verify? ...

Ludolfo by • L1 Bithead
  • 3430 Views
  • 1 replies
  • 0 Likes

Use URL filtering and Regional blocks

We block Regions at the moment, so traffic going to Russian IPs are dropped. But lets say that I now need to allow a specific URL to be allowed to Russia. If I make a rule above our block rule that has a custom URL category associated with it and define HTTPS as the service. Will that now force layer 7 inspection on all of that traffic? Or was i...

Resolved! Can't find user for security policy rule

Having a bit of an issue but can't seem to pinpoint the solution.. When I go to add a security policy rule, under user, i cannot find specific users. However, when I go to the traffic monitor tab, I can see the user mapping is working from the User-ID agent, since I can find those same users there. Not tied to a specific firewall as I'm not ...

MikeC by • L3 Networker
  • 5623 Views
  • 4 replies
  • 0 Likes

Resolved! No serial no or Auth Code on VM

Hello All, I want to create support account to license my palo alto vm. But while registering it is asking for Device Serial no or Auth Code and Sales Order no or Customer ID, wheareas i dont have any of these. My PA VM does not show serial no. Snap attached . I downloaded authorization code from PA FW but that is uuid & cpuid. How can i cr...

  • 24431 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks