General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Wildfire categorizing as cat=THREAT but not sure why? How to update FPs?

Hi everyone,Apologies in advance if this has been asked, but this is my first post re: Wildfire. We receive e-mail alerts via our SIEM when something is categorized as malicious from our PA device, but I noticed that all that is listed within the payload that tells me why it was categorized as a threat is: "cat=THREAT" As well as the hash which...

Resolved! Past PAN-OS version

Hi Community, Is there a way to find out all the PAN-OS versions which were uploaded, installed and executed on a Palo Alto firewall in the past? Guess this information is hidden somewhere on the TSF but have been unable to find where it´s stored. Thanks.Ho.

HonoAl by L1 Bithead
  • 5044 Views
  • 3 replies
  • 0 Likes

Resolved! Content Update Issue

Hello, I am trying to update my OSS PA but am receiving an error of "failed to update content with following message encfilesize." I have tried different content versions and the result is the same. The contents are transferred to the PA via SCP. And unfortunately, I can't update PanOS without being able to update the content first. There i...

COlson by L2 Linker
  • 4413 Views
  • 2 replies
  • 0 Likes

Voice Call Signalling Issues - Hold, Transfer, Call Pick-up all randomly fail

At a handful of locations when someone calls in and the staff go to pick-up the call it does not pick-up and continues to ring on other phones in the office. When they place someone on hold, sometimes it does not come off hold and they call is dropped. When they transfer someone it does not always transfer the call. Cisco Call Manager shop.We ha...

Unencrypted HTTP basic authentication not flagged as a risk/threat?

I was doing a side-by-side comparison of various IDS/IPS sensors, including an inline Suricata sensor, as well as my PAN firewall. Suricata throws an alert if it detects that an HTTP Basic Authentication event crosses the sensor over an unencrypted connection, but the PAN firewall doesn't. This should throw an alert of some kind, as HTTP Basic A...

Master Key Deployment from Panorama

Has anyone deployed a new master key from Panorama to an HA pair? Following the process at https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-firewalls/manage-the-master-key-from-panorama.html it doesn't mention anything about HA. Per https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/certificate-management/configure-the...

mb_equate by L3 Networker
  • 2212 Views
  • 1 replies
  • 0 Likes

Resolved! How to disable config sync in a HA pair?

Hello,I'am using to PAN devices in a HA pair, and i want to make some changes on one and not on the other before doing a switchover. Can i disable only config synchronisation and let all the other HA functionality up?Regrds.

asia by L3 Networker
  • 15855 Views
  • 6 replies
  • 0 Likes

Panorama - logs displayed for some firewalls are almost 20 hours old

Panorama 9.1.2 VM Both firewalls running 9.1.2 and forwarding logs to Panorama. For one firewall the logs in Panorama are current. For the other they are over 19 hours old for the traffic logs. There is a third firewall where Panorama shows logs more recent than 19 hours but still not current. NTP settings match on all devices and clocks sho...

certificate profile

Hi I want to use/setup a certificate profile for use with an EDL. The site - internal running minemeld. has multiple int CA.So for the profile, do I add only the last int CA or all of them.How does certificate profile work will it say okay if any certificate signed by any of the ca's work ?how can i limit it to just the last intCA... do i do tha...

Unable to send email alerts

I am trying to setup my PA to send email alerts, however when I try sending a test email I receive the following message "Failed to send email to gateway". I am using an SMTP relay server to relay emails from the PA to O-365. Does anyone have any recommendations on troubleshooting to see why it keeps failing?

Resolved! OID for CPU (DP)

Hi everybody, Anybody knows if there is an OID to get graphs of every DP of the CPU?are those the only OID for the CPU monitorizing?hrProcessorLoad.1 - 1.3.6.1.2.1.25.3.3.1.2.1hrProcessorLoad.2 - 1.3.6.1.2.1.25.3.3.1.2.2 Thanks a lot!

BigPalo by L4 Transporter
  • 2702 Views
  • 1 replies
  • 0 Likes
  • 24412 Posts
  • 125 Subscriptions
Top Solution Authors
Labels