This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

PA-500 || Chassis Master Alarm: Temperature

We've been getting this critical alarm for our PA-500 device. > show system environmentals----Thermal----Slot Description Alarm Degrees C Min C Max CS0 Temperature at MP [U6] False 35.67 5.00 50.00S0 Temperature at DP [U7] False 39.00 5.00 50.00----Fans----Slot Description Alarm RPMs Min RPMS0 Fan #1 Operational False True 1S0 Fan #2 Operatio...

Resolved! Log retention

how long will our firewall keeps logs locally. when i run this command "show show system logdb-quota it's show the Traffic Log is for 26 Days. it means the normal user traffic logs will keep maximum 26 days , right Please Suggest

Joshan_Lakhani_0-1589308200110.jpeg

PAN OS LAB Guide

I'm new to PAN OS and I'm looking to learn what it has to offer. Is there a way to license the device and panorama for lab use only?

Tunnel Monitor Query

I want to configure an IPSec VPN tunnel with redundant VPN peers primary peer "A" using tunnel1 and secondary peer "B" (if "A" goes down) using tunnel2. I can configure failover using Tunnel Monitoring, but my question is "Why are routes to my VPN peer network installed in the routing table using tunnel1 (more preferred) over tunnel2?". I cannot...

Resolved! SSL decryption forward proxy in vwire mode and common name of certificate

We have PA 9.1 running vwire for vendor traffic.I need to create ssl decrypt cert for the user traffic going to internet. Seems SSL decryption can work in vwire mode.When I create self signed cert for the user PC what should I put under common name?any name will work?As traffic is sourced from the switch which is doing all the natting and it ha...

MP18 by • Cyber Elite
  • 4583 Views
  • 2 replies
  • 0 Likes

Resolved! MortiAgent Malware and Palo Alto

MortiAgent Malware is added to the Palo Alto signatures database? It's Palo Alto aware of this Malware? want to stop the MoriAgent malware.How to configure this in Palo alto to ?

Global Protect User Mapping

Hi Folks, We have following scenario and unsure how to do it. Please let me know your thoughts: We have VM Palo Alto and we are implementing Global Protect.The Global Protect Portal and Gateway would be one and the same VM.We are planning to only have only one VPN link/URL which will be given to our customers.Now, we are planning to create all t...

Resolved! How to create IPv4 list from a text file

Hi community, I am encountering decrypt-err with Anydesk application after deploying SSL Decryption. In order to fix that, I am going to create a list of Public IPv4 that Anydesk use to excludes them from the decryption. Currently I collected an IPv4 list and want to create an EDL so I can simply add them to exclusion list. I have created and us...

tienngo by • L2 Linker
  • 14615 Views
  • 9 replies
  • 0 Likes

PAN-OS Upgrade

We're planning to upgrade the PAN-OS from 9.0.6 to 9.1.X version.Which is the stable 9.1.x version? Thank you.

set readonly commands

Found a bunch of config lines as such. Where/how? Can't delete them. They don't appear in the GUI. set readonly device-group grpname address-group NAME_LAN_GRP id 289set readonly device-group grpname address-group NAME_LAN_GRP id 290set readonly device-group grpname address-group NAME_LAN_GRP id 291set readonly device-group grpname address-grou...

luchette by • L1 Bithead
  • 4333 Views
  • 3 replies
  • 0 Likes

Resolved! How much bandwith are GlobalProtect clients comsuming?

Hello, Is there a way to see the bandwidth that VPNs clients are using when they are connected through a VPN? I have not seen any specific report for GlobalProtect statistics, for example in ACC. Just logs in the tab Monitor, but they are not showing the activity of the users. Regards,

iscott by • L2 Linker
  • 5924 Views
  • 5 replies
  • 0 Likes

Force GlobalProtect client to only apply to 1 of 2 ethernet connections

I have 2 physical ethernet ports on my Windows PC. 1 is for external internet and connecting to work VPN. The other is for a local-only ethernet network. When I connect to my office VPN via GlobalProtect, I lose access to the devices on my local-only network. How can I tell GlobalProtect to only apply to traffic on ethernet port 1? Why is it red...

Panorama space issue

8.1.0 is 782MB and 8.1.8 is 422MB. I deleted them both but i still cannot directly download 9.0.8 which is 423MB.I have also followed this KB and deleted content updates but still no go. Manual upload did work. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLSJCA4 Before upload show system disk-spaceFilesystem Size Us...

raji_toor by • L4 Transporter
  • 4280 Views
  • 4 replies
  • 0 Likes

Resolved! Two Directly Connected PANs via IPSEC- Do I Need to Build Tunnel Interfaces

We are having installed a 10 Gbps Light Wave service for a WAN connection and will have PANs on either side. (The PANs will be on the same /30 subnet, and the Wave service appears to be a raw fiber connection terminated on physical PAN L3 interfaces). We want to authenticate the other end and encrypt using IPSEC. Do I need to build a tunnel inte...

  • 24414 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks