This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Panorama Upgrade

Hi All, I carried out an upgrade on a Panorama appliance this morning, M-100 model. Went from 9.0.6 to 9.0.9-h1. Process was fine however it needed a cold boot (pull power cables) to recover, it did not come back on its own. Couldn't even console to it. Left it for over 3 hours. My question is are there any logs within the unit I can retrieve to...

Blocking ilovepdf application on Palo Alto

There is high risk app (ilovepdf) used which got identified in CASB in our corporate network & management informed to block this app in Palo Alto. Please let me know if there is any option to block ilovepdf app only specifically in Palo Alto firewall.

preetpk by • L2 Linker
  • 3712 Views
  • 1 replies
  • 0 Likes

Palo Alto - SSL ciphers that offer medium strength encryption

We used Nessus tool to run security scan on the PA-5020 & PA-3020 series & it identified with the following below medium vulnerability:"The remote host supports the use of SSL ciphers that offer medium strength encryption" Please let me know, for any fix to this vulnerability. I found one solution for the same in below link. Just want t...

preetpk by • L2 Linker
  • 3597 Views
  • 2 replies
  • 0 Likes

Resolved! Traffic from GlobalProtect stop working after upgrade from 8.1.11

Hi,I have two PaloAlto 3020 in an active-passive cluster. PanOS 8.1.11 is nstalled on both. Everything works correctly, internal traffic, traffic from GP Client, vpn tunnels. GP clinets connect, sends HIPs, Palo recieves this HIPs, traffic is passing trough according to rules.The problem is that when I updated one cluster node from version 8.1.1...

JacekL by • L2 Linker
  • 5904 Views
  • 4 replies
  • 0 Likes

Resolved! Error message in System logs

We have a PA that is displaying this message every 60 seconds for some reason. "highopaque: DO NOT CHOOSE WMI in ADGMEL03 FOR YOUR USE CASE IF SEE THIS LOG AGAIN" What is it indicating and how to turn it off?

Problems with the support Portal

Hi Team, I need to open a new case from the portal, however pressing the create case button gives me an error and does not allow me to even verify the cases that I have open. Regards,

Error Support Portal.JPG

Aruba clearpass user id issue with Palo Alto

We have ClearPass integrated to Palo Alto. ClearPass sends user-id to the firewall upon successful authentication. Customer is experiencing an issue where the laptop (on wireless) would fail to access Internet at re-authentication. There is another client device that is login with the same user-id. I think the question here is with user-identi...

Resolved! ftps/ftpes

How can I allow an FTPS (FTPES) connection? I assume the PA tracks an FTP connection and understands the related data connection. Does it understand FTPS? If I set a policy for ftp, it fails when it tries to open a data connection.Kim

kjh by • L1 Bithead
  • 10631 Views
  • 5 replies
  • 0 Likes

9.0.9-h1 for Panorama?

I am looking to upgrade our VM Panorama devices from 9.0.6 to 9.0.9-h1 but whilst I can 9.0.9h1 via Panorama>Device Deployment>Software I cannot see it available under Panorama>Software. Does that mean that it is not available for my device?

StuartS by • L1 Bithead
  • 3267 Views
  • 1 replies
  • 0 Likes

GlobalProtect Pre-Logon setup uses multiple IP addresses

I have setup GlobalProtect with Pre-Logon configuration, but between the "pre-logon" status and "post-logon" status of the same computer I am getting 2 different IP addresses. For example, during pre-logon I get 172.16.4.201, but as soon as a user logs into Windows I get 172.16.4.200. Is there any way to keep the IP address the same between th...

CTW1983 by • L2 Linker
  • 7827 Views
  • 6 replies
  • 1 Likes

Timeout when connecting to Azure

I seem to be having an issue where the microsoft_graph_secapi output nodes aren't succesfully connecting to Azure. I don't know what I could have possibly configured wrongly to cause this.

IsaacKuf_0-1594283370776.png
IsaacKuf by • L0 Member
  • 3846 Views
  • 2 replies
  • 0 Likes

PA-VM deployed in Bluvalt cloud (openstack)

Dears,I'm new in paloalto firewall. We deployed PA-VM in our provider Bluvalt cloud (openstack) and we need to use vpn site to site tunnel with another provider. I will be grateful if anyone can help us to make the settings from the beginning.

  • 24483 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks