This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Upgrade advices compatibility

Hi, I explain my scenario: We need a cluster A/P in 8.0.x. We had issues upgrading when the LACP didnt come up in the passive node jumping to 8.1.10.So in the last try we realised that jumping to base 8.1.0 the LACP interfaces were up. So we will do this upgrade path:8.0.13->8.1.0->9.0.0-> 9.0.9-h1. Customer has UIA 8.1.6 versionPanora...

BigPalo by • L4 Transporter
  • 3240 Views
  • 4 replies
  • 0 Likes

Resolved! security policy application and service\ or service?

Hello,If I have a policy for example that allows application "web-browsing" and service is "port 500" - does that mean that the rule will allow if the application is either "web browsing" OR "service 500" or the rule will be allowed if the application is "web browsing" AND "service 500"?Thanks.

roma by • L2 Linker
  • 2468 Views
  • 1 replies
  • 0 Likes

Panorama VM to VM migration while going from Legacy to Panorama Mode

Hello all, currently we use a Panorama VM running PanOS 9.0.5 in Legacy mode (did not even know that was possible) to manage a couple of HA pairs of firewalls. Unfortunately we are unable to edit the resources of that VM in our Hypervisor, likely due to how it was originally provisioned, so we cannot go the route of adding the needed resources f...

Resolved! Static Route Path Monitoring for automated VPN failover

Hello,I would like to know if static route path monitoring can monitoring outside of the interface bound to the static route? For example, I want to monitor across a VPN tunnel and if the test fails, withdraw the static route so traffic fails over to the backup VPN tunnel. I don't have a IP addresses (within the tunnel) on the destination side o...

Bilbo007 by • L0 Member
  • 12131 Views
  • 2 replies
  • 0 Likes

Cyber Elite interview with MP18

Hey there everyone. I wanted to let everyone know that the Cyber Elite experts are among our top contributors within LIVECommunity, and our first interview is with @MP18. Read the blog here: https://live.paloaltonetworks.com/t5/blogs/get-to-know-cyber-elite-mp18/ba-p/347622 Get to know more about him as he shares a bit of his background, ...

jdelio by • L7 Applicator
  • 3387 Views
  • 1 replies
  • 4 Likes

How to create e new network interface on a device using Panorama

Hi all,I'm quite new using Panorama.I need to create a new network interface on a device managed by Panorama.I tried to modify the template but when I push it to device I got an error telling that there isn't that interface.Of course I miss something.Could you help me understanding what? Thanks

MGatti by • L1 Bithead
  • 6363 Views
  • 4 replies
  • 0 Likes

URL filtering and white list

Hi,I would like to do url white listing. before i do white listing , i would like to monitor all url of users and office application.after that i would like to allow specific url only. In paloalto monitoring is only show destination ip address and never show the url. I would like to know can i mornitor the user access url and application access ...

crypto by • L2 Linker
  • 4519 Views
  • 3 replies
  • 0 Likes

MFP devices wont scan to email anymore

Hello guys and Happy New Year!!First time when I use an palo alto device. So I configure this device PA-220, and I put it on my network.Everything works great but I have some problems; For example now all my MFP devices wont scan to email anymore. I use PAN OS 8.03. Some advices ?Thank you,

Resolved! Removing Un-Installed PANs from Panorama> Templates

We've closed an office and took the two PA-500s off the network, and are now attempting to remove them from Panorama (following this procedure: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cmd6CAC ). Everything is good up to 3 a. Panorama Templates: Remove the device from "Template-Stack"...I have multiple devices i...

Resolved! how to View Pre-Shared key in PA

i'm have issues with IPSEC Tunnel which is configured by another engineer. currently facing issues with Tunnel connectivity and i need to cross verify the parameters. So can someone guide how to heck pre shared key in plain text format @IPSec IPSec S2S VPN between Palo Alto and 3rd party Security FW Vendor -> ISAKMP Negotiation Question regar...

Virtural router how many do have and when to have multiple

Hi So I am doing some network segregation. I have vr with say 40 interfaces on it.I want to add 3 more.can i create a new vr (vr_b)place the 3 interface on the new vr (vr_b) and then create a vlan to connect vr original (vr_a) to new vr (vr_b) When do you create a new vr ?And what is the down side.

Resolved! Slots as it relates to interface

Apologies for the simplicity of the question, but can someone help me understand the relationship between slots and interfaces? Network > Interfaces > Add Interface (You pick a Slot and then an Interface Name) - but I don't understand what one has to do with the other. Hopefully my questions makes sense to someone. Thanks.

Resolved! It's possible to block custom file hash-256

It's possible to block custom file hash-256 in Palo alto.Please let me know how I can check the respective file hashes disposition at a wildfire, either it is in block or not. Here is below the file hashes need to know for disposition. f743c0849d69b5ea2f7eaf28831c86c1536cc27ae470f20e49223cbdba9c677ce56d45628f0c2bda30ab235657704aac50a8433bdb4215c...

PA-Aggregate-Group-Configuration-Dual-Uplink-Core-Switch

Dear Techs, Hope you all are doing fine and safe. Can some one give me an insight on how I can configure 'Aggregate Interface Group' so that I can maintain a high availability for Internet traffic with my core switch? To make it more simple. The below is my current scenario. From a single cisco core switch, up-links goes to the firewall and the...

  • 24458 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks