This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! APP-ID Doubt

hello community, I have a question that I have not been able to solve with the study material and it keeps breaking my head.Here it goes, when I generate an application-based security policy, for example from "trust" 10.xxx to "untrust" anywith app anydesk specification (with the ssl dependency), I see the corresponding traffic between the inter...

ServiceRoute

I have configured trust and untrust zone with respect to their interface. I create policy of any any...my firewall internet only work when i configure service route and destination as outgoing interface,if i set it as default and select use management for all interface...my firewall lose its internet connectivity for upgrading OS,URL updates. My...

Swetang by • L1 Bithead
  • 2535 Views
  • 1 replies
  • 0 Likes

Veteran Exam Voucher

Hi, I'm in the process of working on my Palo certification and saw that I could request an exam voucher on https://live.paloaltonetworks.com/t5/second-watch-articles/step-10-request-exam-voucher/ta-p/304454 but I have received no response from the folks at [email protected] for over a week. Has anyone had any luck getting a vou...

swtucker by • L1 Bithead
  • 7405 Views
  • 5 replies
  • 0 Likes

Resolved! gp logs sync with the passive but with time difference!

Hello, Logs should only be placed in the active node, however i am keep monitoring the globalprotect logs for 3 days and i am sure that the active node does not change, however the logs is still appears on both nodes each with different time. Did some one noticed this ? PAN OS 9.1.3-h1

Resolved! [API]PYTHON PANDEVICE - SET SECURITY PROFILE

Hi all, I'm using PaloAlto's API for the first time.My idea is the following: - for each rule, I would like to apply a security profile based on the service setted. Reading some docs online i wrote this pseudocode. HOSTNAME = '192.168.55.10' API_KEY = 'My_Api_Key' fw = pandevice.firewall.Firewall(hostname=HOSTNAME, api_key=API_KEY) rulebase =...

Chango by • L1 Bithead
  • 11854 Views
  • 7 replies
  • 1 Likes

Publish Custom ACC Tabs

I created a custom ACC tab with some filtered widgets and need to share it with some other users to monitor the network over the weekend. The users are not proficient with panorama, I basically want them to watch the tab I have created and call if X criteria is met. Is there a way to publish my tab so it appears on all the user accounts without...

PaloAlto Logs Issues

Having issues regarding the log.cannot see any logs on the Palo alto firewall.The changes: - we downgraded from Panos 10 to Panos 9.1.x since then we cannot see any logs.

Windows based user-ID agent not collecting mapping logs

Hi Team, We have installed the windows based user id agent on domain controller and created service account with necessary privileges following below guidelines. https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/user-id/map-ip-addresses-to-users/create-a-dedicated-service-account-for-the-user-id-agent.html We are able to start the agent...

Resolved! Changing Master Device - Panorama

We have recently gone through a firewall hardware upgrade, and the device that was replaced was our old "Master" device in Panorama. I would like to make the new device our "Master" device, but I am intimidated by the call-out "When you change the Master Device or set it to None, Panorama loses all the user and group information received from th...

Getting Systems Alerts

Hello,I am getting system alerts in my firewall below is the error:- Disabled applications in vsys1: cip-ethernet-ip-disable-io cip-ethernet-ip-disable-sfc cip-ethernet-ip-enable-io cip-ethernet-ip-enable-sfc cip-ethernet-ip-read-mod-write cip-ethernet-ip-read-tag cip-ethernet-ip-read-tag-frag cip-ethernet-ip-run cip-ethernet-ip-stop cip-etherne...

Resolved! Log Collector not receiving logs.

Hi All, We have deployed 2xM200 Log collectors for log collection. They are registered on the panorama and show in-sync. I have done the collector-group settings. Now when I go to Panorama > Managed collector > the log collectors show disconnected status (screenshot attached). With the message "Log collector <serial number> failed to...

VarunRao_1-1595814847860.png
VarunRao_0-1595814717239.png
VarunRao by • L2 Linker
  • 28780 Views
  • 9 replies
  • 0 Likes

Betternet VPN Lemon VPN blocking

Anyone know how to block these 2 apps? Betternet VPNhttps://www.betternet.co/ Lemon VPNhttps://play.google.com/store/apps/details?id=org.lemonvpn.android&hl=en_US We have a BYOD at our K-12 education schools, and students are bringing their own devices in with these installed. I assume there are other VPNs out there coming in too. We have a...

dannon by • L3 Networker
  • 9204 Views
  • 6 replies
  • 0 Likes

How to check VPN counters for a specifc dest IP?

how to check IPSEC VPN counters in CLI for a specific destination IP address?Peer is claiming the traffic is leaving their firewall but I don't see it on my pcaps and logs. How do I verify the traffic is actually passing through the VPN and hitting the tunnel? I have hundreds on server in the proxy-id as I have a /12 as the destination.Thanks.

Resolved! Panorama

Just need to know is there a max size for a Panorama log file and if so what is that size, currently we are at 1.6TB and want to make sure we are not over the limit and into possible file corruption scenario

dttech by • L1 Bithead
  • 3207 Views
  • 2 replies
  • 0 Likes

Hyper-V Compatibility issues

Hey,I'm running a 3 Node S2D on Server 2019.Currently migrating from VMware Hypervisors which has the Palo Alto running on it, instead of doing a Migration\Conversion i want to build a new server. I'm trying to setup a Palo Alto VM-300 Series Virtual machine which comes as the VHDx File.I'm using SCVMM and select use an Existing Virtual Machin...

  • 24471 Posts
  • 125 Subscriptions
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks