This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Newbie in need of help: Forwarding traffic logs to a syslog server

Hi community, I need to forward all traffic and threat logs to a log collector. I understand most of the process except the security policy part. Once I create a syslog server profile and then a log forwarding profile, I then need to use that log forwarding profile in my security policy. Our firewalls have many rules and my only instructions hav...

damom10 by • L1 Bithead
  • 3903 Views
  • 2 replies
  • 0 Likes

Active sessions across inactive vwire

Just curious about what I'm seeing. I have two interfaces that are in a vwire. The switch interfaces which go to the the FW were shut down last week yet looking on the firewall, I see that there are still active sessions which show these two interfaces as the ingress and egress points. These sessions would have been established before the inter...

epeeler by • L2 Linker
  • 2441 Views
  • 1 replies
  • 0 Likes

Resolved! Incorrect Rule Assignment UrlCategory Any

External ipaddress 23.35.182.93 is getting incorrectly mapped to a rule "Permit Intranet Sites". The rule uses a Urlcategory for Intranet sites and the destination has trust/untrust zones with a negate on one specific destination address. What might cause the firewall to misapply rules if the dns to ipaddress mappings are effectively static? I a...

Getting intermittent unknown UDP traffic logs

Hi All , I am having policy having application group and set services as application default . Sometime policy is working fine but sometime its dropping packet and in logs showing application unknown UDP. Could you please suggest any troubleshooting steps here ? I did packet capture but not seeing any this specific which can indicate any issue...

deepak12 by • L3 Networker
  • 5963 Views
  • 4 replies
  • 0 Likes

Resolved! Fresh install on Ubuntu via apt won't login (ERROR CHECKING CREDENTIALS)

I've just followed the instructions (https://live.paloaltonetworks.com/t5/minemeld-articles/manually-install-minemeld-on-ubuntu-16-04/ta-p/253336) for setting up a fresh install of MineMeld on Ubuntu 16.04 LTS (on Azure, in this case). Followed every single step, including the reboot at the end. All of the services show as being in a RUNNING s...

RuscalR by • L0 Member
  • 3723 Views
  • 1 replies
  • 0 Likes

Resolved! Adding Routes via Windows

Hello, I'm attempting to add routes via cmd using the 'route' command but I'm encountering issues, none of my traffic is being passed by the gateway. My intent is for a host (10.10.3.22 in this example) to egress out of R1 (10.10.3.250) to another network on 10.10.2.0. Checking my firewalls logs at R1 (10.10.3.250), I see no traffic even being t...

p2.png

TCP Session Stuck and only manual clear of the session id solve the issue

Dear Community, we are facing a strange behavior with a tcp flow that is meant to mount a volume on a linux server, from time to time, the session get stuck in the firewall causing an error while trying to mount the device, the topology is as follow: Linux Server <-> Firewall 1 <-> Firewall 2 <-> Script Server the Script server...

Resolved! NTP server

hi guys, i am lookin to config PA 5220 as a NTP server for my lan network, this whole network is completely off of internet.is it possible to config if yes what are the steps.I tried keeping the Primary and secondary NTP fields blank, but if want to broadcast the PA local time on my LAn network, am unable to find further config settings.Does any...

Resolved! HA config sync only manually possible: Commit not synchronized

Hey. I enabled HA active-passive on a new 3220-pair. HA1a & b, HA 2 & HA backup are green and working fine so far. I can also do a manual sync, which works fine. In HA config i enabled config sync. The failover works fine too, as i tested it. But it seems, there is no HA auto running-config sync to HA-peer. In dashboard (High Availabili...

Pengsti_1-1594219641354.png
Pengsti_0-1594219554734.png

BYOD Decryption

Has anyone been succesful in using decryption on a network where most computers are not on the domain? I am working at a school where all students are bringing their own devices so we cannot push decryption certificates through group policy.Thank you

I can't see sufficient information on OpManager Dashboard

Hi everyone,yesterday we've installed OpManager in our company to monitor VPN Users of GlobalProtect,i've fully turned on everything on SNMP Side but somehow i can't see some of performance monitors like Active VPN Users,Active VPN SSL Tunnels,VPN Tunnel Traffic In and Out etc..Btw the device is PA820.So let me add my dashboard and an instance o...

WhatsApp Image 2020-03-20 at 10.45.28.jpeg
OPMonitor.PNG
Onrcan91 by • L0 Member
  • 3356 Views
  • 1 replies
  • 0 Likes

Resolved! dedicated HA interface

Hello, I would like to ask if there is some way to take a packet capture in ha dedicated interfaces I know how to do it in management interface and data plane interface but not found information about how to see the traffic in this interfaces, thak you in advance.

Resolved! Authentication issue

i have recently upgrade my firewall from 8.1.16 h3 to 8.1.13 h3. When the user connected with Global protect after sometime user is unable to access the application infect global protect show it's connected. when i saw in monitoring traffic it's show user domain have change the name from abc\abc to abc.com\abc. when i disconnect the GP and aga...

Joshan_Lakhani_0-1595245686648.png
  • 24446 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks