General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 550 Views
  • 0 replies
  • 2 Likes

HA Pair licence

Hi,

I have to 2 PA firewalls with HA Pair licence onboard. I want to reconfigure them to work separately. Is it possible? What licence says about that? If it's written somewhere in docs, where I can find it?

Resolved! FaceBook Games

Is there a way to effectively block FaceBook games?

I found this: https://live.paloaltonetworks.com/t5/General-Topics/facebook-games-block/m-p/23675
but this is 2013 and not all games are Zynga's.

Resolved! Configure MAC based Security rule for SSL VPN User

Hi Team,

 

Is it possible to create a security rule based on Source MAC Address instead of Source IP Address?
My requirement is, I want to create a rule for our SSL VPN users which is having our Company owned devices only connecting to our network.
Do yo
...

SahulH by L3 Networker
  • 5602 Views
  • 1 replies
  • 0 Likes

Can we configure pbf in shared gateway ?

We have configured two ISP link in Shared gateway (sg)

ISP 1 : sg1

ISP 2 : sg2

 

All LAN subnets are different Vsys. For internet access we are using shared gateway for all Vsys.

We have configured pbf rule in each Vsys for accessing internet over ISP 2 ,

...

Deepak_K by L3 Networker
  • 2589 Views
  • 3 replies
  • 0 Likes

Resolved! PA-220 Throughput Explanation

Can someone please tell me the maximum Upload/Download speed in megabits per second for a PA-220 with app-id and all threat prevention/ips features enabled along with an ipsec tunnel? The data sheet is a little confusing and I understand that it base...

Resolved! Concurrent users of Palo Alto 3020 SSL VPN

Hello, I need to know how many concurrent users the Palo Alto PA-3020 device can support. I know what has capacity for 1000 VPN tunnels (Ipsec, SSL, ETC), and I understand that the PA 3220 supports 200 concurrent SSL VPNs, but how many concurrent use...

Lcarocas by L0 Member
  • 3534 Views
  • 1 replies
  • 0 Likes

Changes to GP Gateway IP Pool

Hello,
Any idea if following 2 changes to GP Gateway IP Pool will affect the current sessions?

 

1) Expand the current pool from /24 to /22

2) Adding new pool entry

jkansal by L0 Member
  • 2579 Views
  • 2 replies
  • 0 Likes

ha_nat_policy_mismatch counter

Hi Everyone,

 

What exactly does the below counter indicate and what would trigger it? 

ha_nat_policy_mismatch

I have added L3 interfaces to an existing A/A HA cluster that uses vwire interfaces in an asymmetrical traffic environment. The traffic on thos

...

ha_nat_policy_mismatch.png
ABurger by L0 Member
  • 2198 Views
  • 1 replies
  • 0 Likes

Bulk update of objects

I have a requirement to update the 100s of /32 address objects which do not have a CIDR.  Does anyone know of a script or other means to do a bulk update of the addresses to append CIDR?

Resolved! i2c bootup errors (PA200)

A friend of mine found a PA200 at a thrift store for $5.00 (without a power supply) I plugged it in today to see what state it was in and it looks like it had a rough life... All the guts are still inside and everything is clean and connected however

...

IMG_20200310_201325.jpg
hshawn by L4 Transporter
  • 4340 Views
  • 3 replies
  • 0 Likes
  • 23744 Posts
  • 110 Subscriptions
Top Solution Authors
Top Liked Authors
Labels