This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by • Community Team Member
  • 435 Views
  • 0 replies
  • 2 Likes

Resolved! routing between 2 virtual router

hello,

i have a setup like the image below.

my goal is to allow internet throught interfaces 3 and 4 (i have a virtual router with these 2 interfaces, vr_l3) : this is working

i have an IPSEC tunnel on interface 1 (with another virtual router, vr1) to r

...

xxx.jpg

Resolved! dynamic address group in google cloud

has anyone used the dymanic address group objects in google cloud pan? is it supposed to pull all metadeta e.g. labels by itself. i am not seeing anything populated once i click the "Add March Criteria" button

josggf by • L2 Linker
  • 2628 Views
  • 2 replies
  • 0 Likes

Resolved! File export issue

Hello,

 

Whenever I export security rules or NAT rules from the firewall in PDF/CSV format, the file is not properly displayed my software version is 9.0.4

example:-

 

clipboard_image_1.png

Resolved! Minemeld Feed Password OR api security

Hi we have used minemeld for some monthes and i figured out that i want to tighten the security even more.

The question that then arose was the posibility to generate an api key or an user based authentication for my output indicators

 

I don't know or

...

m1.PNG
m2.PNG
Kimwii by • L1 Bithead
  • 31240 Views
  • 15 replies
  • 2 Likes

URL Access Error

Hi all,

I have setup MineMeld on a VM and it seems to be working correctly but, when I setup the EDL on a PAN firewall and test it, I get a "URL access error" message on the firewall

I have generated CA from Palo alto and i have created a certificate s

...

clipboard_image_0.png

Resolved! *Urgent* Global Protect.

Hi Team,

 

We require to download the Global protect VPN client updates on our repository. So that users can direct update their existing Global Protect Client VPN software when connected to LAN network.

Is there any way of downloading these updated ver

...

Panorama Unresponsive

Our client has noticed their Panorama VM becomes occasionally unresponsive after upgrade from 8.1.3 to 9.0.6.

 

Has anyone experienced this issue? Is there a known bug?

 

 

Source address of PBF Monitor heartbeat ICMPs

I have a Policy Based Forwarding related question.

 

If we have a PBF rule, with Monitoring enabled, and the "disable this rule if next-hop/monitor ip is unreachable" also enabled.

 

So Palo Alto sends ICMPs to the monitored IP address out of the egress

...

*URGENT* URL Filtering

Hi folks,

 

Is there a way to block the entire sub-domains but to allow a particular sub-domain and its related subs ??

 

For Ex:

Domain :     *.cloudinary.com/*   

( Which covers  *.Cloudinary.com/blog/*  ,  *.Cloudinary.com/about/*   , *.Cloudinary.com/c

...

Resolved! Layer 2 Palo Alto to 802.1q subinterface on Cisco ISR

I am thinking to put a small pan between an Internet connected Cisco 4331 ISR and a Meraki switch. Will the PAN just pass all the tagged frames along and will the PAN be able to process the traffic from all those VLANs/tagged frames? Or would I need

...

Resolved! GlobalProtect gateway client configuration failed

Hello,

 

We are using PAN-OS 8.0.0 and GP agent version 4.0.2 

We cannot set any IP address for the Gateway. If we try then it auto changes to 'None'.

The output from the show global-protect-gateway gateway command shows there are two gateways.

But accord

...

GW.png
Systemlog.png
Farzana by • L4 Transporter
  • 6768 Views
  • 2 replies
  • 0 Likes
  • 23698 Posts
  • 110 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks