General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 86 Views
  • 0 replies
  • 0 Likes

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 792 Views
  • 0 replies
  • 0 Likes

Resolved! Configure MAC based Security rule for SSL VPN User

Hi Team,

 

Is it possible to create a security rule based on Source MAC Address instead of Source IP Address?
My requirement is, I want to create a rule for our SSL VPN users which is having our Company owned devices only connecting to our network.
Do yo
...

SahulH by L3 Networker
  • 5865 Views
  • 1 replies
  • 0 Likes

Can we configure pbf in shared gateway ?

We have configured two ISP link in Shared gateway (sg)

ISP 1 : sg1

ISP 2 : sg2

 

All LAN subnets are different Vsys. For internet access we are using shared gateway for all Vsys.

We have configured pbf rule in each Vsys for accessing internet over ISP 2 ,

...

Deepak_K by L3 Networker
  • 2735 Views
  • 3 replies
  • 0 Likes

Resolved! PA-220 Throughput Explanation

Can someone please tell me the maximum Upload/Download speed in megabits per second for a PA-220 with app-id and all threat prevention/ips features enabled along with an ipsec tunnel? The data sheet is a little confusing and I understand that it base...

Resolved! Concurrent users of Palo Alto 3020 SSL VPN

Hello, I need to know how many concurrent users the Palo Alto PA-3020 device can support. I know what has capacity for 1000 VPN tunnels (Ipsec, SSL, ETC), and I understand that the PA 3220 supports 200 concurrent SSL VPNs, but how many concurrent use...

Lcarocas by L0 Member
  • 3701 Views
  • 1 replies
  • 0 Likes

Changes to GP Gateway IP Pool

Hello,
Any idea if following 2 changes to GP Gateway IP Pool will affect the current sessions?

 

1) Expand the current pool from /24 to /22

2) Adding new pool entry

jkansal by L0 Member
  • 2734 Views
  • 2 replies
  • 0 Likes

ha_nat_policy_mismatch counter

Hi Everyone,

 

What exactly does the below counter indicate and what would trigger it? 

ha_nat_policy_mismatch

I have added L3 interfaces to an existing A/A HA cluster that uses vwire interfaces in an asymmetrical traffic environment. The traffic on thos

...

ha_nat_policy_mismatch.png
ABurger by L0 Member
  • 2342 Views
  • 1 replies
  • 0 Likes

Bulk update of objects

I have a requirement to update the 100s of /32 address objects which do not have a CIDR.  Does anyone know of a script or other means to do a bulk update of the addresses to append CIDR?

Resolved! i2c bootup errors (PA200)

A friend of mine found a PA200 at a thrift store for $5.00 (without a power supply) I plugged it in today to see what state it was in and it looks like it had a rough life... All the guts are still inside and everything is clean and connected however

...

IMG_20200310_201325.jpg
hshawn by L4 Transporter
  • 4587 Views
  • 3 replies
  • 0 Likes

Global Protect won't connect to Iphone MAC

Hello All,

 

We have Global Protect License for mobile we upgraded recently to 5.0.8 and i see my iphones will not connect.

did any one face this issue ? Works fine with  windows and desktops only with iphone i face the similar issue.

Any help will be mu

...

MilanP by L0 Member
  • 3485 Views
  • 3 replies
  • 0 Likes

Different deployment mode in different VSTS

Hi All,

 

I would like to know whether it is possible to use different deployment mode (L3 or L2) for 2 VSYS of a same physical paloalto firewall box. 

 

We have 5620 and 5680 model. 

 

Thanks and regards 

 

Chandrajit

  • 23991 Posts
  • 115 Subscriptions
Top Liked Authors
Labels