This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

*Urgent* TCP out of order.

Hi team, My customer is facing the TCP out of order in pcaps while accessing SMB application. He implemented the Zone protection in LAN zone which has Asymmetric path set as global, I changed it to bypass... Will this resolve the issue...?? why TCP out of order is happening..?? .

Regarding URL Filtering

Hello Everyone, I am little confused in creating URL filtering policy rule. Does allowing certain url category in the policy block everything else? For example in a policy from inside to outside i created and allowed url category online storage and backup with service application default and application any. With this policy i can't access anyth...

Pearson VUE - endless frustration with the most horrible company on Earth!!

I sat multiple exams from multiple vendors during the last 2 months and one of them was Palo Alto. All of the exams were the so called "online proctored exams" which are served by the super ridiculous OnVUE platform written by script kiddies during a high-school recess. You can login no earlier than 15 mins prior the exam during which you need t...

TheGrave by • L0 Member
  • 9778 Views
  • 2 replies
  • 1 Likes

Reliability of "name-of-threatid" in threat log searches

When using the "name-of-threatid" to search threat logs I am getting very inconsistent results. Some signatures are returning properly, while others return blank results - even when I build the search syntax dynamically by clicking on the alerts in the results pane i.e. perform an unfiltered search, click on an alert name so it adds it to the se...

apackard by • L4 Transporter
  • 4234 Views
  • 1 replies
  • 0 Likes

wildfire submission issue

There are certain files which were sent to wildfire for multiple times and every time we have received verdict as malicious.The same file (i have verified the file hash available in wildfire cloud) is submitting multiple times even after the verdict is malicious from old wildfire submission but it's not block. As iam running 9.0.5 PAN-OS version...

11111.png

Resolved! PAN-OS BGP

Hi, I'm familiar with BGP in general, but not so much on the Palo Alto platform. I'm peering with a service provider, but I don't see a default route being advertised toward us. The default route in the routing table is learned from an OSPF neighbour (which is the expected behaviour of course). I'm trying to find out how to see the routes that w...

Luke_R by • L2 Linker
  • 3267 Views
  • 2 replies
  • 0 Likes

Invalid portal error in GlobalProtect

have the GP 4.1 client installed on a computer with Windows 10 Enterprise v2004 64bit, which when wanting to connect to the company portal, marks me as invalid portal, everything related that I have found on the network has already been reviewed but without exical.The curious thing that this computer worked well with a Windows 7 32bit, the probl...

Need some guidance on the VM series implementation

Hi there,I have inherited the current network and need some help in replacing the firewall for like to like. We have a MPLS network connecting all our offices and an external firewall managed by the ISP. Traffic from all sites go out via the external firewall. I am replacing an old ASA with the PA-VM Series firewall as an internal firewall in on...

Network.png
nitz-sw by • L0 Member
  • 3854 Views
  • 4 replies
  • 0 Likes

ISP Failover With Controlled Failback

We have a pair of PA-3020 setup with HA and ISP Failover. PAN OS 9.1.3-h. I am not using PBF. I want to connect our VOIP phone switch to the firewall. Our VOIP phones connect to a cloud based PBX. I setup a new VR for VOIP with ports for ISP1, ISP2, and Inside. Failover / Failback works fine. Here is the problem. ISP1 goes Offline and the teleph...

Authentication Policy Use Case

Here use case and wondering if this is feasible. 1. User Bob is already authenticated and connected(tunnel VPN) to firewall A with GlobalProtect with his account "Bob".2. User Bob need to access critical ressource behind the same firewall A with, however, his privilege account "Bob-Priv". Problem, its look like the authentication policy is neve...

Useability suggestion: Add Context sensitive Right Click Menu to PANOS UI.

I suggest PA should add context sensitive right click menus to the web UI in PanOS(Both Firewall and Panorama) As an example, when a Security Policy rule is selected right click should popup a menu with actions that can be done on the item.Like "Add Above", "Add Below", "Clone", "Enable", "Disable", "Delete", "Move", Etc Basically just add a men...

KellyM by • L1 Bithead
  • 2668 Views
  • 1 replies
  • 0 Likes

Admin roles and Detailed Log View (spyglass)

Hello Community!I'm trying to create an admin role that gives a user access to the Monitoring functionality. But with full access to Monitoring only, they are not able to open the details for each log entry - Detailed Log View.I've granted Privacy access too, but that didn't help.Anyone know what specific access is needed to be able to click on ...

Quick Question.

Just a quick question... Why didn't I buy Cisco instead? Pretty sure Cisco wouldn't keep me on the phone for hours... Multiple days in a row without so much as answering the phone once. Pretty sure Cisco wouldn't ignore a sev 0 ticket for days in a row... Palo Alto cant keep an SLA... Palo Alto got me feeling like a chump. Looks like we go back ...

Captive portal not working

Hi Everyone,Im trying to configure captive portal on PA 220 for users trying to access any website should redirect to captive portal and after authentication via username and password they will get access, but anyhow im unable to achieve that. Below are the configuration i have done on my PA220.1) configure the user object for local database aut...

  • 24460 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks