General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4224 Views
  • 0 replies
  • 0 Likes

Minemeld crash once in a while

HI,My Minemeld is running in a docker container. It consumes memory as much as possible. Now the server is configured with 32 GB memory, still 100% usage by Minemeld. It crashes every a couple of days. The requested url for feed gets internal error. I have to restart the container to fix it. We are processing lots of indicators. Total number is...

yguo29 by L0 Member
  • 3995 Views
  • 2 replies
  • 0 Likes

Resolved! File Blocking - allow images/videos block everything else

I'm trying to permit download of gif, jpeg, mpt4, png, svg, webp, and woff, and deny everything else in both directions. I tried 1) setting up a block rule for any file type in both direction and an allow rule for the file types above for download only2) setting up the allow rule, and then updating the block rules manually selecting every single...

font blocking

Hello, I'd like to block users from downloading any OpenType (.otf) and TrueType (.ttf) fonts. Is there any way to block them?

Password Profiles complexity

I would like to set up a Password Profile with all attributes at zero, can this generate an account lock or would I have no problems? regards

bmacedo by L0 Member
  • 2769 Views
  • 2 replies
  • 0 Likes

Dual ingress ISP setup vs Juniper SRX

Hi, there is a fundamental difference between Juniper SRX and Palo Alto Firewalls regarding how reverse route look up occursfor a session. With Juniper SRX, if I have two ingress traffic via two different ISPs, I can put each into its own routing instanceand Juniper forwards the reverse traffic back via ingress ISP. It is very simple and elega...

Resolved! Customizing Captive Portal Response Page

Hi!I would like to customize the captive portal response page including some corporative images. However, if I link the images to an external server, I get warnings from the browsers because the entire page is not secure. Is there any way to upload the images to the PAN?Thanks!

ajripa by Not applicable
  • 5320 Views
  • 2 replies
  • 0 Likes

BGP Peer with ISP

Hi I need some guidance on setting up BGP peer with my ISP, this is a new connection. I have external interface setup and I can ping to next hop and route to public internet. I need to advertise the /24 block network that my ISP assigned me. This PA will be used as GP Protal and GW, and they have been assigned IPs from /24 block. Is there do...

Amin2 by L2 Linker
  • 3051 Views
  • 1 replies
  • 0 Likes

Applying QoS for WebEx behind PA FW

Hello, I have a WebEx Server hosted behind a PA FW. I need to apply QoS for it. Currently, I have a NAT in place to NAT the WebEx Public IP to the Server Private IP, Destination NAT is applied. Is it applicable to apply QoS for such traffic? I need to ensure WebEx stability despite the utilization.

Global Protect config problem: The server certificate is invalid.

Hi, In lab i am trying to setup a simple global protect configuration where the gateway and portal are on the same IP and just using local user authentication. I have a certificate for my my public IP from let's ecnrypt and have imported this into palo alto. I am able to connect to the portal without any certificate issues. But when connectin...

GOMEZZZ by L2 Linker
  • 58623 Views
  • 10 replies
  • 0 Likes

Resolved! URL filtering sequence in Panos 9.0

We are going to upgrade the PAN NGFW from 8.1 to 9.0I have below queriescase 1 : if we have below setting in URL filtering profile will be able to block facebook.com ?custom category_block* - facebook.com - blockcustom category_allow* - facebook.com - allowpredefined category - social networking - block case 2 : if we have below setting in URL ...

Deepak_K by L3 Networker
  • 3349 Views
  • 1 replies
  • 0 Likes

Resolved! How much time Panorama will be down if we upgrade it to 9.0

As per the attached image, its suggested to take maintenance window of 6 hours for Panorama upgrade activity. Also we cannot move ahead for firewall upgrade unless logging updated on Panorama.We are storing logs in Panorama-M200 and not using any device (log collector) to store the logs. can we ignore the recommended points.If its applicable to ...

Panorama.PNG
Deepak_K by L3 Networker
  • 4564 Views
  • 1 replies
  • 0 Likes
  • 24355 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels