This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! How to reach the Palo Alto management interface form my internal network

Hi,I'm fairly new to Palo Alto firewalls and just set up a home lab, but I have a problem accessing the management interface from my local network. I have 4 network devices in my network: - Modem/Router- Palo Alto PA-500 (PAN-OS 7.1)- Cisco 2960 switch- Cisco 1602 AP I'll try to explain how everything is connected, but I also added a picture of ...

Topology.jpg

Resolved! Root cause of Syslog alert message

Hello, On 14th November at 4:53PM AEDT, we were receiving the following syslog message:"Request made to PublicCloud server returned with HTTP response code : 502"We kept on receiving this message every 5 minutes approximately till 21:46 on the same day. No change was made at our end, we were still able to browse the Internet, Licenses are valid,...

System Log.jpg

Blocking external Skype client authentication

Hello, We are looking to block our skype clients from authenticating to our on prem servers. We nee the ability to have external parties join our web skype conferences. Anyone know what ports to block to prevent the Skype client from authenticating? I've been looking and looks like my client connects over 443/ssl but that needs to stay open for ...

User-ID mapping limitation using RDP

Dear community, We have a desired scenario where user_1 connects from machine_1 to machine_2 using rdp and login with user_2.We´d like that the mapping of machine_1 associates with user_1 and machine_2 associates with user_2. We are aware of the limitiation of User-ID in this scenario:https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?i...

Carracido by • L4 Transporter
  • 2831 Views
  • 1 replies
  • 0 Likes

Is Azure A Safe Place To Secure Data On Cloud?

I am planning to take Azure certification from one of the renowned training institute in Bangalore. I was reading some facts about Azure i.e Azure is a service provided by Microsoft which was initially known as Windows Azure. The function of Azure is basically internet-based computing or popularly known as cloud computing which helps in sharing ...

Resolved! A question about PA-3020

Hello, I've got a PA-3020, but I don't have license. What do I lose without the product license? Only support? I would like to know.

AKAMAI API for IP Addresses.

Hello All, I have a customer that requested the information below: "We have recently discovered that apple is moving to Akamai for services like App store and IOS updates. Would you happen to know if Akamai has an API for the ip addresses so we can set this up in MindMeld since they are dynamic". Please can anyone advise so I can relay th...

sodhegba by • L2 Linker
  • 4273 Views
  • 1 replies
  • 0 Likes

Mac users unable to change passwords via GlobalProtect

Bit of history. We, our system architect, deployed GlobalProtect prior to covid and work from home. He set it up using SAML and no RADIUS. 5mo into work from home and most users have been required to change their passwords if not all of them. To date everyone is fine except for any user using a Mac. I see documentation from Palo Alto saying ...

GlobalProtect behaviour in Chromebook

Can anyone please confirm if below is the expected behavior of the GP Android App with internal gateway on Chromebook?When inside the network with internal host detection GP greys out. Using GP 5.2.2 If GP greys out after connecting does this mean the user should be detected by the portal without a tunnel establishment?

Odd traffic going out through an application-specific security rule

I've got a rule that allows the following applications from any source in our trusted zone out to any destination in the untrust zone.appdynamicsdns-over-httpsdns-over-tlsgithubms-delvenet.tcpntpocspoktapaloalto-updatespaloalto-wildfire-cloudpan-db-cloudrtcpservice-nowskypesshwindows-azurewindows-push-notificationsThe rule is set for application...

Resolved! Difference between app base rule and service base rule.

Hi All, Just some queries, 1) what is the difference between the App base rule and Service base rule?2) For security purpose which one is a more secure app or service base rule?3) What is the benefit of using App base rules? Thanks in advance.

HELP! Failed to download due to protocol error. Please try again later. updater error code:-28

I am spinning up a new 820 HA pair and on my last site I am getting an error when downloading the OS and dynamic updates. The other site work fine. I am getting the following error: Failed to download due to protocol error. Please try again later.updater error code:-28Can any one help me out here? Im on 9.0.4 trying to go to 9.1.4

JohnMaki by • L1 Bithead
  • 8708 Views
  • 4 replies
  • 0 Likes

Resolved! SSL Certificate renewal query

We got certificate tree like this:the public certificate (Trusted root CA) from Digicert, Intermediate cert (Digi root) and then the SSL/TLS cert (DigiVPN). This DigiVPN is going to expire soon and we use it for GP portal and GW. The server cert is by itself and got a tick next to CA column. It is valid till 2023 and used as cert profile in GP. ...

VPN Tunnel Monitoring between two Palo Alto devices

Hello, From what I understand, when creating a tunnel monitor between two PA devices it's best to assign IP addresses on the same segment to the tunnel interface on each side. The monitor is then setup with the remote destination on each side. Example:FW-A-Tunnel.1 (10.10.10.1/30) <---> FW-B-Tunnel.1 (10.10.10.2/30) FW-A will monitor 10...

NobleNOC by • L0 Member
  • 2396 Views
  • 1 replies
  • 0 Likes
  • 24469 Posts
  • 125 Subscriptions
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks