This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Disney+ domain being sinkholed as DNS tunneling domain

This morning I starting noticing that my threat logs are filling up withsinkhole actions for the followingSuspicious DNS Query (search-api-disney.svcs.dssott.co)Suspicious DNS Query (dssott.com) Threat TypespywareThreat NameDNS Tunneling DomainID109001001 (View in Threat Vault)Categorydns-securityContent VersionAppThreat-0-0SeverityhighRepeat C...

Resolved! Manage Traffic within two vsys

Hi, How to route traffic between two vsys on same firewall? Currently when I am trying to put policy, I am not able to see required destination under security policy which belongs to other vsys on same firewall. Does it require some specific configuration?

Vikashh by • L2 Linker
  • 4626 Views
  • 2 replies
  • 0 Likes

Custom report for phishing prevention

Is there a way to generate a custom report of users/sites that have entered credentials? I checked under the URL database but don't see a Credential Detected column there that I could pull in. Anyone have a method of generating a report from the phishing prevention feature?

Internet service down

Dear All,I was facing disconnection issue with our internet firewall, cannot ping to LAN interface, all services related to the LAN interface was down like internet connection, MPLS and DMZ Zone, once I reboot the firewall everything back normally and the Lan interface working fine, we need to investigate to avoid the issue in future. I have che...

Multi vsys license requirement

Hi, I am using PA3200 firewalls and require multi vsys capability.I need 4 vsys, so shall I need to purchase a license for 3 vsys only?ORA multivsys license can activate all supported vsys ? Thanks.

shapath by • L0 Member
  • 6358 Views
  • 3 replies
  • 0 Likes

TCP-RST-FROM -CLIENT /SERVER for a category license-expired

Hello Community. I have been observing the logs coming from one server that is behind the PA-FW and while going around the VM, trying to connect to the Azure admin portal, I have observed that it has a slow connection for a 600-700Mbps. While trying to track the logs from the firewall it shows that traffic is having TCP-RST-FROM-CLIENT or TCP-RS...

azure.PNG

Resolved! I cannot use an EDL in URL Filtering or SSL No Decrypt Policy

Thanks for any help you can offerPanorama 9.1 instructions show this image about using edl's as part of a url filtering or ssl decryption policyHowever even though I have several EDLs configured and working I am not given that option. See images belowHow can i enable this functionality.Here is a screenshot of my edlsAnd here is were I am missing...

edl listed.jpg
edl list.jpg
No List.jpg
LeeRRoss by • L0 Member
  • 3219 Views
  • 1 replies
  • 0 Likes

Unable to get proper report

Dear Team, We are not getting proper report for Last calendar month using query builder i.e (zone.src eq VPN) and destination is any and report has generated from 17 April to 23rd April.When use query builder i.e (zone.src eq VPN) and (zone.dst eq LAN) it is showing whole month report i.e starting from 1st April to 30th April. RegardsKarthikey...

Dual ISPs, VRs, and BGP Configuration Advice

Hello! Not new to networking, but new to PA, so looking for some configuration advice. Have a PA-3220 and would like to add a second ISP connection for redundancy. If that was all then it seems pretty simple and I've found several KB articles on how to accomplish that. However I have a /24 and /27 block of public IPs that I also need to route...

GlobalProtect user always returns authentication failed

(T14508) 05/04/20 09:48:34:904 Info ( 474): msgtype = user_credential(T14508) 05/04/20 09:48:34:904 Debug(2642): ServerThread: ProcessServerUserCredential. Redirect to processServerPortal.(T14508) 05/04/20 09:48:34:904 Debug(1714): ----portal processing starts----(T14508) 05/04/20 09:48:34:904 Debug(1736): User profile type is 0(not roaming)(T14...

ACC tab "Applications using Non Standard Ports"

Hi PA Live Community, Still a newbie to the whole PA world but slowly getting there.When looking at the ACC tab of the GUI I can see there are entries for "Applications using Non Standard Ports" and also "Rules allowing Applications on Non Standard Ports" Screenshot attached below.Can someone explain why this is alerting as it is? I am using A...

Rule Screenshot.JPG
ACC Screenshot.JPG
  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks