This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

2 internet lease line links. (Single ISP)

two PA firewalls and we configured in HA (Active-Passive mode).We got /28 subnet from ISP for 2 internet lease line links. (Single ISP)configured links on one firewall with IP 99.100.100.111 on interfacet 4 and 94.100.100.110 on interface 2. With next hope 94.100.100.109after commit we got interface overlap error.Is it possible to configure this...

bit_byte by • L2 Linker
  • 3292 Views
  • 2 replies
  • 0 Likes

Having Issue while trying to access Captive Portal on HTTPS

Hi Experts, I have configured Captive Portal using below how to;https://www.gns3network.com/how-to-configure-captive-portal-in-palo-alto-firewall/ Now, while I am trying to access an HTTP website, i.e.http://www.example.com/, I am getting captive portal and upon successful submission, I am able to surf the internet. But, while I am trying to acc...

vsk770 by • L0 Member
  • 2223 Views
  • 1 replies
  • 0 Likes

Threat alert for one drive

@hisingh Hello,Palo alto has been released a new signature Virus/Win32.WGeneric.alpvznName: Virus/Win32.WGeneric.alpvznUnique Threat ID: 354554856Antivirus version -3414-3925 update date(19/7/20)We are getting Virus alerts in the Threat log for OneDriveSetup.exe.I waited for the next signature, today new version is update - 3414-3926 update dat...

Source user missing from log

I have user mapping configured under user identification to monitor my AD servers - which are showing as 'connected'. My trust zone has user-id enabled. My globalprotect clients are in the trust zone. Their 'source user' correctly shows in the traffic log. However none of the other networks in my trust zone list a source user in their log entri...

Resolved! Vm series palo alto

Hello All, Need to know how can I get a palo alto image to install in my vm for lab purpose Any help will be highly appreciatedRegards,Vishal

Can't update Global Protect through the NGFW (5.1.1 - 5.1.5)

Hi, I have the problem that, running GP 5.1.1 I get the message that there is a newer GP Version (5.1.5) available.But when I try to update, the update is not working. The Debug Log shows: (T8312)Info ( 604): 07/08/20 07:41:15:329 #### updater started, command is C:\Users\[...]\_temp3356.msi(T8312)Debug ( 39): 07/08/20 07:41:15:329 try verify ...

Resolved! The SSL Certificate is showing unsecure in one device

I have installed an SSL certificate on my firewall it is working fine for all of our Palo Alto devices except one device as it is showing it is not secure.I checked and I found that the device is still using the localhost generated certificate. I don’t know how to force it to use the SSL Certificate I installed.Note that I set up the SSL/TLS Ser...

Resolved! User-ID: ip-user-mapping not working from LAN

Hi all, I tried to configure the User identification for our LAN zones with PAN OS 7.1.3. I have the following Environment Windows 2012 R2 ServerPA-500 with 7.1.3 I can see more than 200 users known by the firewall admin@firewall(active)> show user user-idsUser Name Vsys Groups------------------------------------------------------------------...

Resolved! Global Protect VPN client holding internal DNS address on Wireless network adaptor

Hi, I am new to PA and having just started in a new role we have an on-going issue with remote workers connecting via VPN. Sometimes when they have finished their VPN session the laptop's wireless adaptor will still have an internal dns IP address in its dns server settings. This means the user cant connect to the internet until they go to the p...

vwire setup in active-active mode with port-channels

I am trying to add a pair of PA 850's in vwire mode between a Cisco ASR1001 router and a nexus 6k over that has a port-channel configured. I setup the PA interfaces as a vwire , setup the zones, and polices. Am I suppose to aggregate the interfaces on the 850's? When I tried to insert the 850's in between the router and switch this weekend all i...

Virus/Win32.WGeneric.alpvzn - OneDriveSetup.exe detected in threat logs

@hisingh Hello,Palo alto has been released a new signature Virus/Win32.WGeneric.alpvznName: Virus/Win32.WGeneric.alpvznUnique Threat ID: 354554856We are getting Virus alerts in the Threat log for OneDriveSetup.exe.is that false positive?how can I stop this threat alert?I have checked this application is working fine. Thank you.!!!!!!!!

Panorama - Remote PA52xx

I have not had much hands on with Palo Alto in particular Panorama but I would like to ask for some help -We have Panorama at our central Data Center which is used to Configure our remote PA52xx's. If Panorama is used to apply policy to a firewall and there is a need to rollback a recent policy change which of these are possible. 1) Rollback th...

mcronin by • L0 Member
  • 2294 Views
  • 1 replies
  • 0 Likes

Need stdlib.aggregatorIPv4Generic to provide single IPs instead of IP ranges

Hello all, I am trying to use Minemeld in a setup with Microsoft Sentinel (Microsoft Graph). I am encountering an issue with entities of type IP, as they are getting in my log analytics space as IP ranges, mentioned in the "ExternalIndicatorID" along with the word IPv4. I cannot process that and I need single IP alone in another column, like N...

  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks