This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Dual ingress ISP setup vs Juniper SRX

Hi, there is a fundamental difference between Juniper SRX and Palo Alto Firewalls regarding how reverse route look up occursfor a session. With Juniper SRX, if I have two ingress traffic via two different ISPs, I can put each into its own routing instanceand Juniper forwards the reverse traffic back via ingress ISP. It is very simple and elega...

Resolved! Customizing Captive Portal Response Page

Hi!I would like to customize the captive portal response page including some corporative images. However, if I link the images to an external server, I get warnings from the browsers because the entire page is not secure. Is there any way to upload the images to the PAN?Thanks!

ajripa by • Not applicable
  • 5550 Views
  • 2 replies
  • 0 Likes

BGP Peer with ISP

Hi I need some guidance on setting up BGP peer with my ISP, this is a new connection. I have external interface setup and I can ping to next hop and route to public internet. I need to advertise the /24 block network that my ISP assigned me. This PA will be used as GP Protal and GW, and they have been assigned IPs from /24 block. Is there do...

Amin2 by • L2 Linker
  • 3204 Views
  • 1 replies
  • 0 Likes

Applying QoS for WebEx behind PA FW

Hello, I have a WebEx Server hosted behind a PA FW. I need to apply QoS for it. Currently, I have a NAT in place to NAT the WebEx Public IP to the Server Private IP, Destination NAT is applied. Is it applicable to apply QoS for such traffic? I need to ensure WebEx stability despite the utilization.

Global Protect config problem: The server certificate is invalid.

Hi, In lab i am trying to setup a simple global protect configuration where the gateway and portal are on the same IP and just using local user authentication. I have a certificate for my my public IP from let's ecnrypt and have imported this into palo alto. I am able to connect to the portal without any certificate issues. But when connectin...

GOMEZZZ by • L2 Linker
  • 61395 Views
  • 10 replies
  • 0 Likes

Resolved! URL filtering sequence in Panos 9.0

We are going to upgrade the PAN NGFW from 8.1 to 9.0I have below queriescase 1 : if we have below setting in URL filtering profile will be able to block facebook.com ?custom category_block* - facebook.com - blockcustom category_allow* - facebook.com - allowpredefined category - social networking - block case 2 : if we have below setting in URL ...

Deepak_K by • L3 Networker
  • 3471 Views
  • 1 replies
  • 0 Likes

Resolved! How much time Panorama will be down if we upgrade it to 9.0

As per the attached image, its suggested to take maintenance window of 6 hours for Panorama upgrade activity. Also we cannot move ahead for firewall upgrade unless logging updated on Panorama.We are storing logs in Panorama-M200 and not using any device (log collector) to store the logs. can we ignore the recommended points.If its applicable to ...

Panorama.PNG
Deepak_K by • L3 Networker
  • 4724 Views
  • 1 replies
  • 0 Likes

Unable to register a used PA-500 Firewall

Hey, I recently bought a PA-500 Firewall on eBay for testing in my Lab. Unfortunately, I can’t register it at Palo Alto Website, because it is already registered. So I can’t get access to resources like Firmware-Upgrades or even get access to a LAB-License… < Unfortunatelly I can't open a case because you need a registred device (or a device ...

Resolved! AE Interface State when Connected to Switch LAG

I'm working on an HA project, but can't get the interfaces to negotiate.2 x PA-3220 v8.1 2 x Dell N4032F switches latest recommended firmware The firewalls are setup for active/passive HA and the switches are configured for MLAG and have a LAG setup to connect to the firewalls. The PA ae interface on the active firewall shows one physical in...

Resolved! Want to upgrade only Panorama to panos 9.0

In PAN OS 9.0 multiple URL category feature is added(high, medium and low risk category).Is there any issue if we only upgrade panorama to 9.0 and not a managed firewalls ?We should not face configuration or commit issue as panorama and firewall will be on different platform.

Deepak_K by • L3 Networker
  • 2665 Views
  • 1 replies
  • 0 Likes

Ipsec Tunnel Failover issue

We have a PA-3020 firewall pair that has multiple IPsec tunnels to a VM series pair in AWS. We have 4 IPsec tunnels that we run to the firewalls. They are: Tunnel A - On Prem to AWS FW1 over Direct ConnectTunnel B - On Prem to AWS FW2 over Direct ConnectTunnel C - On Prem to AWS FW1 over Public InternetTunnel D - On Prem to AWS FW1 over Public I...

Fr4nk4 by • L2 Linker
  • 4791 Views
  • 1 replies
  • 0 Likes
  • 24479 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks