This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

How to stop the output of CUID errors

Attention: JAPAC TPM team Hello I'm Shono Kawaguchi. Please tell me how to stop the output of the following error. high　userid　cuid-conn 0 gRPC connection to identity.services-edge.paloaltonetworks.com:443 is broken, error: Feature is not enabled or device cert isn't available for CUID gRPC connection time: 2025-03-26 02:51:47 As long as...

Syslog Custom Format for Splunk

I'm trying to get the firewall to send before and after change detail to splunk. I've tried various formats in Custom Log Format, but any changes I make result in no logs being sent to splunk. What is the correct format for Custom Log Format when using syslog and splunk? I'm running PA OS 8.1

Resolved! Applipedia Down?

Hi, Applipedia (https://applipedia.paloaltonetworks.com/) currently seems down - I'm getting "Sorry, an error occurred while processing your request." when visiting. Anyone able to advise when this will be back up, or if this has been moved elsewhere? Thanks.

s3cb0ar by • L0 Member
  • 7027 Views
  • 12 replies
  • 1 Likes

VPN issues with 3 ISPs

After upgrading to the pa-850 10.2.13-H3 version, problems started occurring in one of the ISPs. There are 3 ISPs, the first two main ones and the third one as a secondary ISP which manages the VPNS. After the upgrade the configuration was maintained and there were no changes (administrative and metric distance), suddenly they started to fail ca...

F.Pinar by • L3 Networker
  • 1316 Views
  • 2 replies
  • 0 Likes

Resolved! export ike debug to syslog

Hello, We are having an intermittent tunnel issue. We have debug turned on in the ike logs and when I view them on the box I see all the debug logs. However, these rollover pretty fast and if the issue occurs and no one logs in to pull the logs within an hour or so then they are gone. We have set up a syslog server and the palo is sending logs...

SeanHuff by • L0 Member
  • 1556 Views
  • 3 replies
  • 0 Likes

Resolved! MFA external provider question

Hello Community, I have always use don-prem solutions for MFA. Currently I am researching using a 3rd party provider, (Duo v2, Okta Adaptive, PingID, and RSA SecurID) . Which one do you use and would you recommend them? I was considering Duo since they have the lowest cost offering. Love to hear your thoughts! Cheers!

Unable to set SSL/TLS Service Profile with Panorama

Hello, At a bit of a dead end with a template change. Essentially, I am trying to configure the VMSeries Firewalls SSL/TLS Service Profile under: Device > Setup > Management > General Settings > SSL/TLS Service Profile I have configured the profile and requisite certificates in my template but when I push the changes, the SSL/TLS ...

panorama_template.png
fw_profile.png
fw_general_settings.png
C.Stuart by • L1 Bithead
  • 6458 Views
  • 8 replies
  • 1 Likes

GlobalProtect to Facilitate Multi-Factor Authentication Notifications

I'm working on setting this up, however when the popup box appears on the laptop wanting me to click on the link for additional authentication I am brought to a webpage saying the connection has timed out. Now the url is going after <ip address>:6081. If I do a port scan against the IP address I do not see it listening on port 6081. I have...

zthiel by • L2 Linker
  • 4705 Views
  • 5 replies
  • 0 Likes

Disk usage alerts

I have a small doubt, always the /opt/pancfg exceeds 80% and I get a constant alert, I would like the alert not to jump at 80% but to start jumping the alert at 90% or so, is it possible to change the percentage of the alert?

Resolved! Change ISP

we're upgrading the internet link in one of our offices...so qwe purchased a new link from a different provider...and I was thinking of unplugging the old link, plugin the new link, remove the old public IP address and then add the IP address of the new link, change the default route...the firewall is PA-200 version 7.1.14...has anyone done this...

Disabling bad checksum on Firewalls

Hi All, We have received an request to disable the drop of packets due to bad checksum. I had the following questions on this: Q1: Can i see in the traffic logs if any connections are dropped due to bad checksum. Q2: This can be done by entering the following command through CLI set session strict-checksum no Is this correct? Will it h...

  • 24411 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks