General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! URL from URL filtering and SSL Decryption

Hi folks!

I have an andriod device that has a news app installed and also included into the SSL decrypted devices zone. The traffic from this app is apparently has a certificate pinning because it doesn't show anything once started. Obviously, the Pal

...

ovel by L2 Linker
  • 5611 Views
  • 4 replies
  • 0 Likes

Resolved! Configuring QoS

Hi, I'm still a little new to Palo Alto (but familiar with QoS concepts), and right now I'm trying to understand how QoS is configured on a PA3020 in production (configured by someone else before I was with the company).

 

I can see a QoS profile calle

...

Luke_R by L2 Linker
  • 3642 Views
  • 4 replies
  • 0 Likes

Resolved! Multi-domain/child domain group mappings

We are in the process of moving two old domains into a new domain with child domains and have been having some issues with UserID and group mapping applying the wrong domain to users, which in turn makes it so the correct security policies don't appl

...

Resolved! OSPF question

I have a stub area - my office.

But I have 2 paths into it from area 0.0.0.0

Is it still a stub as its has 2 paths in and out.

 

so area 0.0.0.0 via rtr A to area 10.172.0.0 or area 0.0.0.0 via rtr b to area 10.172.0.0

 

What I want it just the DGW sent it

...

Resolved! Warning in panorama "app not found"

We are having a warning when we push in panorama:

 

We have check the apps&threats version and everything is OK. Panorama version is 9.0.4. It could be a cosmetic issue?

appweb.jpg
BigPalo by L4 Transporter
  • 10111 Views
  • 13 replies
  • 1 Likes

HA link monitoring

Hi All,

 

I apologize for the basic question and have to ask since I do not have a spare firewall pair to test with.

 

Wanted to understand the link group configuration behavior when there are no interfaces specified under it. Palo Alto does accept the c

...

rahulbri by L1 Bithead
  • 5983 Views
  • 5 replies
  • 0 Likes

Access from dynamic Office 365 URLs to internal ressources

Hello,

Im using minemeld to get the dynamic address (URLs, IPs) from office 365.

 

If there are IP addresses, this works without problems via the EDL. In this case the EDL replace the source object.

What about addresses that have a wildcard in the URL? T

...

edogan by L0 Member
  • 2852 Views
  • 1 replies
  • 0 Likes

Wildcard domain + destination question

Hi..I want to be able to allow a specific set of apps to *.github.com.  To do this would I simply specify a custom URL with *.github.com and destination of ANY?  That would then only allow those apps to *.github.com?  I ask just because I am wary of

...

Annotation 2020-01-21 093816.png
drewdown by L4 Transporter
  • 2419 Views
  • 3 replies
  • 0 Likes

Mgmt interface stop working

Hi.

 

I have a PA-500 and after a storm, the management interface stopped work. When I connect a network cable the leds doesn't work.

I made a configuration to access the Firewall and to use some services throught another interface, but the "Log Schedul

...

Panorama Admin authentication using AD groups

When I tried to put the all or username in authentication profile allow list . The user can login into panorama but when I tried to put on group it does not work and keep reporting that its failed to apply the group . I have tried all combination but

...

ba31 by L1 Bithead
  • 3117 Views
  • 0 replies
  • 0 Likes

Minemeld on Rancher/K8 - View of logs in UI hangs

Hi,

I have Minemeld running successfully using the paloaltonetworks/minemeld docker image on our internal Rancher/Kubernetes cluster.

 

Everything seems to be working perfectly except the logs view within the UI. When we attempt to load the logs here or

...

Resolved! GP external gateway - Connection method Pre logon Always on

We are using SAML in Azure for GP external gateway connection.

When connection method is on demand we get mobile push notification and user gets connected to the GP.

 

Testing with Connection method Pre logon Always on, i am not getting mobile push noti

...

MP18 by Cyber Elite
  • 5064 Views
  • 9 replies
  • 0 Likes

Resolved! how to download global protect agents?

Dear Techs,

 

How can I download a specific version of global protect agent? 

 

Note: Due to audit points, the PA portal login page is currently disabled. Generally, I log in to PA portal and download the activated versions from there. 

 

Is it possible to

...

  • 23715 Posts
  • 104 Subscriptions
Top Solution Authors
Top Liked Authors
Labels