This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

public ip addresses and link address /30

Hi, I have a question regarding public interface configuration. ISP gave me /30 link network address space and /28 public IP address pool. Can you suggest me best way to configure this public address on PA. Should I use virtual wire, loopback interface or can I assign /28 address pool as VLAN on interface.Thank you for replay

patux80 by • L0 Member
  • 3561 Views
  • 1 replies
  • 0 Likes

Authentication Bypass in SAML Authentication.

Dear Support Team, Please do us favour to update Security appliance Palo Alto with latest signature which help to prevent from latest vulnerability Authentication Bypass in SAML Authentication. Patch requirement for CVE-2020-2021 PAN-OS: Authentication Bypass in SAML Authentication RegardsKarthikeyan Balamurugan

Incomplete ARP when deployed in Azure

Hello, I deployed NGFW 8.1 using Terraform (v0.11.36) in Azure. It provisions VM and all the resources like resource group, VNet, subnet, IP's etc., But the only problem is with the UnTrust(eth1/1) NIC as it complains 'Incomplete ARP even after configuring the Interfaces and the static routes in Virtual router page. I only get this problem when ...

Resolved! BGP AS-Path prepend issue

Hi All, I have raised a TAC case regarding this but wanted to see if anyone had had a similar issue with a known fix? We have a pair of Palo Alto's with PANOS 8.1.10 running in active-active configuration. Routing is configured using BGP. The active-secondary export is configured with an AS-Path Prepend of 3 for both peers (inside/outside) to m...

a.jones by • L3 Networker
  • 6294 Views
  • 1 replies
  • 0 Likes

EDL not fetching data but is reachable....

Hi Team, We have PA VM 300 on AWS cloud. We have configured EDL. It is reachable from Management IP all ports are allowed but EDL is not able to fetch data .For information OS version is 9.0.3. Please suggest. Thank You in advance!!

user-id agent sending IP mapping with blank/no username

Dear community, I have an environment where I monitor the AD servers with Windows user-ID agents to retrieve the user-ip mappings There are users with several AD accounts and it´s normal seeing the same IP being mapped to different usernames deppending on what resources the user gets access to. Sometimes I see randomly in the traffic logs the us...

Carracido by • L4 Transporter
  • 3685 Views
  • 1 replies
  • 0 Likes

Resolved! after upgrading to PAN-OS 9.0.x issue with CP

Recently configured the captive portal on the firewall but this feature does not seem to be functional despite the fact the configuration is correct. Note that the portal was working PAN-OS 8.1.3 but after upgrading to PAN-OS 9.0.9 it stopped. Note able to ping the trust interface of the firewall (on which the CP is enabled) and resolve the URL ...

Resolved! Default Route...

Hi Team, I had a default route 0.0.0.0 with metric as ""12'". cable connected on 1/2 and link up path monitor not enabled.We had added one more route 0.0.0.0 with matric as "10".cable not connected on 1/6 interface and port down path monitor not enabled. In the above scenario what will happen ? will there be any impact on existing traffic.

File blocking and Google Chrome

Hi there! I have the problem that the file blocking no longer works properly at the chrome browser. The fileblocking profile was configured and appended to the rule, but I can still download msi files. PANOS 9.1.0 Does anyone have suggestions how i can fix this? 🙂

profile.png
rule.png
download.png
Chris.Ka by • L1 Bithead
  • 7069 Views
  • 6 replies
  • 0 Likes

Resolved! Use SSL Inbound Inspection to decrypt cause did‘t general url log

When customers use the https protocol to access our company's website from the Internet, they need to go through a firewall. After the client's access passes through the firewall, the URL log will be generated on the firewall.But when we enabled SSL decryption on the wall, after decrypting the inbound traffic, the customer also visited the compa...

Felixcao by • L3 Networker
  • 3428 Views
  • 2 replies
  • 0 Likes

AD DNS Zone with A Record not resolving through GlobalProtect VPN gw

We are using Active Directory for our internal corp DNS. I am connected to the corp network using GlobalProtect VPN (multi-gateway). I'm able to resolve names in our primary DNS zone across the VPN tunnel. I just added a new zone, which overrides a public zone - database.windows.net. And, I added an A record to it: <myHostName>.databas...

PALO ALTO PA-850

Hi Every one I want to buy Paloalto PA-850 without license service.what features i can avail freely without any license. can any one help me that to list it.will be waiting for your reply.

Resolved! Custom application definition for radius on a different default port

I have a rule that allows the application radius but is isn't matching my radius traffic. The problem is that my radius traffic isn't on a default port udp/1814. With service set to "application-default" the traffic is identified as radius but is denied. Sure I can change the service to "any", but what I would really like to do is define a ne...

  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks