General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4469 Views
  • 0 replies
  • 0 Likes

Resolved! PCNSE7 or PCNSE??

Hi folks, I am prepping the Palo Alto series exam to grab the piece of certification. However, i searched the internet and found there are two exam options which are seemingly pretty resemble: 1.PCNSE 2.PCNSE7. What is the actual difference between these two certification? Additionally, when i tried to schedule the exam on CertTrak platform (whi...

Resolved! About DIPP Translated Address type (SNAT)

Hello, I have a question related to the DIPP translation. I understand de DIPP Interface. Many IP addresses can use the same IP. But I need to translate internal IP addresses to one specific IP different from the Outside Interface. If I use the DIPP Translated Address, it works similarly to Interface Translation? So for example, Can I translate...

iscott_0-1593190978310.png
iscott by L2 Linker
  • 3782 Views
  • 3 replies
  • 0 Likes

403 - Forbidden: Access is denied. - You do not have permission to view this directory or page using

Hey Guys; I'm doing the training PAN-OS Firewall v7.1, module 2 Initial Configuration.I had to close out the training and now when I try to access the training I get the error message... Server Error403 - Forbidden: Access is denied. You do not have permission to view this directory or page using the credentials that you supplied.Does anyone hav...

NetEngSr by L0 Member
  • 18547 Views
  • 8 replies
  • 0 Likes

Resolved! GlobalProtect Client issues on MacOS Catalina

I'm trying to configure GP Client on a MacOS Catalina (10.15.3) to connect via VPN using PKI certificates. I'm using GP version 5.1.1 (also I've tried with 5.0.6). The problem is that it does not prompt me to select my client certificate and eventually fails stating that "Required client certificate not found". I can see it's trying to work with...

ajrneo by L0 Member
  • 16500 Views
  • 3 replies
  • 0 Likes

8.0.2 Management SLOW, SLOW, SLOW on PA500

Has anyone else noticed that the management functions through the web interface are incredibly slow with 8.0.2? Committing even a simple change brought these timings:- 1:10 just to get the progress bar beyond zero- 3:42 to complete the commit. Seems awfully slow....

Migration from Palo Alto Multivsys to single Vsys

Hi Team,Is there a we can migrate a PA 5050 multivsys configuration from one appliance and migrate it to two different 3220 appliances. Where Each Vsys from single PA 5050 goes to different 3220 appliance. For instance (Vsys1-PA 5050) should converted to one (PA 3220) and another (Vsys2 -5050) goes to second 3220 appliance.

Migration from 5060 to 5260

Hi Team, Currently working on a PA migration 5060 to 5260. I tried to import the config in to the expedition tool, which is exported from PA-5060 appliance. I found the below error on expedition.I also tried to import it after converting to zip file, which also throws an error saying that. "invalid XML Could you please advise or help me conve...

SureshBalaji_0-1588058641095.png
SureshBalaji_1-1588058908486.png

Resolved! Equal Cost Multiple Path (ECMP) - Limit 4 (PA-5220)

Hi All, I need your inputs here. I have a client using ECMP (4 Links.) and they recently procured another ISP making it 5. Based on the documentation of Palo Alto Networks, the max ECMP is 4. Is there any other work around to make ECMP 5 or utilize the 5th ISP?

Resolved! SSL inbound inspection cert

Might be silly question, For inbound inspection does the cert has to be a CA.We use a wildcart so that will have to imported as CA, correct?

raji_toor by L4 Transporter
  • 9928 Views
  • 11 replies
  • 0 Likes

Resolved! Panorama IP Variable set to none/null possible?

I'm pretty sure this isn't supported and I haven't been able to get this to work. I am attempting to use a single network interface template for multiple sites. Some use 30 sub-interfaces and some may only use 3. I want to push every sub-interface to all locations but only set IP variables on the ones that I need. Does anyone know how to set...

Palo alto splunk syslog view

Hi Community, While exporting syslog from palo alto splunk in default format, what is the default format for config logs. Where I can see the default format. Next to hostname what is that value "1" where it comes from?

output.jpg
  • 24379 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels