General Topics

DHCP Options

We have several firewalls (mixed between PA-850 and PA-3260), each firewall is segmenting a diffrent regulatory compliance (PCI,HIPAA, CJIS, DOD and so on) network (with multi vlans in each segment).   Some segments are not large enough to warrent th

2 internet lease line links. (Single ISP)

two PA firewalls and we configured in HA (Active-Passive mode).
We got /28 subnet from ISP for 2 internet lease line links. (Single ISP)
configured links on one firewall with IP 99.100.100.111 on interfacet 4 and 94.100.100.110 on interface 2. With nex

Malicious URL/Object required to test the configurations

Hey,
We have just configured the PAN appliance at our end. Now we want to make sure that everything is working fine and our end machines are secure.
Kindly provide us with a URL and an Object that would create an alert.

Having Issue while trying to access Captive Portal on HTTPS

Hi Experts,

I have configured Captive Portal using below how to;

https://www.gns3network.com/how-to-configure-captive-portal-in-palo-alto-firewall/

Now, while I am trying to access an HTTP website, i.e.http://www.example.com/, I am getting captive por

Threat alert for one drive

@hisingh 

Hello,

Palo alto has been released a new signature Virus/Win32.WGeneric.alpvzn
Name: Virus/Win32.WGeneric.alpvzn
Unique Threat ID: 354554856

Antivirus version  -3414-3925 update date(19/7/20)

We are getting Virus alerts in the Threat log for OneD

Source user missing from log

I have user mapping configured under user identification to monitor my AD servers - which are showing as 'connected'. My trust zone has user-id enabled. My globalprotect clients are in the trust zone. Their 'source user' correctly shows in the traffi

Can't update Global Protect through the NGFW (5.1.1 - 5.1.5)

Hi,

I have the problem that, running GP 5.1.1 I get the message that there is a newer GP Version (5.1.5) available.

But when I try to update, the update is not working.

The Debug Log shows:

(T8312)Info  ( 604): 07/08/20 07:41:15:329 #### updater start

vwire setup in active-active mode with port-channels

I am trying to add a pair of PA 850's in vwire mode between a Cisco ASR1001 router and a nexus 6k over that has a port-channel configured. I setup the PA interfaces as a vwire , setup the zones, and polices. Am I suppose to aggregate the interfaces o

Virus/Win32.WGeneric.alpvzn - OneDriveSetup.exe detected in threat logs

@hisingh 

Hello,

Palo alto has been released a new signature Virus/Win32.WGeneric.alpvzn
Name: Virus/Win32.WGeneric.alpvzn
Unique Threat ID: 354554856

We are getting Virus alerts in the Threat log for OneDriveSetup.exe.
is that false positive?
how can I sto

Panorama - Remote PA52xx

I have not had much hands on with Palo Alto in particular Panorama but I would like to ask for some help -

We have Panorama at our central Data Center which is used to Configure our remote PA52xx's. 

If Panorama is used to apply policy to a firewall a