General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 191 Views
  • 0 replies
  • 0 Likes

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 873 Views
  • 0 replies
  • 0 Likes

Resolved! export ike debug to syslog

Hello,

 

We are having an intermittent tunnel issue. We have debug turned on in the ike logs and when I view them on the box I see all the debug logs. However, these rollover pretty fast and if the issue occurs and no one logs in to pull the logs wit

...

SeanHuff by L0 Member
  • 582 Views
  • 3 replies
  • 0 Likes

Resolved! MFA external provider question

Hello Community,

I have always use don-prem solutions for MFA. Currently I am researching using a 3rd party provider, (Duo v2, Okta Adaptive, PingID, and RSA SecurID) . Which one do you use and would you recommend them? I was considering Duo since th

...

Unable to set SSL/TLS Service Profile with Panorama

Hello,

At a bit of a dead end with a template change. Essentially, I am trying to configure the VMSeries Firewalls SSL/TLS Service Profile under:

Device > Setup > Management > General Settings > SSL/TLS Service Profile

I have configured the profi
...

panorama_template.png
fw_profile.png
fw_general_settings.png
C.Stuart by L1 Bithead
  • 2348 Views
  • 8 replies
  • 1 Likes

Disk usage alerts

I have a small doubt, always the /opt/pancfg exceeds 80% and I get a constant alert, I would like the alert not to jump at 80% but to start jumping the alert at 90% or so, is it possible to change the percentage of the alert?

Resolved! Change ISP

we're upgrading the internet link in one of our offices...so qwe purchased a new link from a different provider...and I was thinking of unplugging the old link, plugin the new link, remove the old public IP address and then add the IP address of the

...

API error messages

Hi all

 

This error message keeps coming up:

 

The latest API KeyGen was executed on <date and time> with the deprecated algorithm. You are advised to configure the more secure API key infrastructure by web interface: Setup -> Management -> Authentia

...

s0lselcia_0-1726499809677.png
s0lselcia by L3 Networker
  • 7329 Views
  • 14 replies
  • 0 Likes

Disabling bad checksum on Firewalls

Hi All,

 

We have received an request to disable the drop of packets due to bad checksum. I had the following questions on this:

 

Q1: Can i see in the traffic logs if any connections are dropped due to bad checksum.

 

Q2: This can be done by enterin

...

Feature Request List

Hi community

 

In a lot of topics there are discussions and questions about PAN-OS enhancements and missing (not yet implemented) features. So far the PaloAlto Feature Request list isn't available to the public but in a lot of these existing topics f

...

Remo by L7 Applicator
  • 87923 Views
  • 142 replies
  • 20 Likes
Palo Alto Networks Approved
Palo Alto Networks Approved

Resolved! SPARE device usage

Dear PANw,

We (as a distributor) have a case where one of our Partners want to purchase SPARE units to cover their multiple client RMA cases (not just one, since OSS devices are registered to one particular customer and stays at their premises, this i

...

Upgrade path to 11.2.5 from 11.0.0 on a PA-410

Hi there,

Can you tell me what would be the recommended Upgrade path to 11.2.5 from 11.0.0 on an HA Firewall Pair PA-410, please?

FW firmware Current ver.: 11.0.0
1. PAN-OS 11.1.0
2. PAN-OS 11.2.0
3. PAN-OS 11.2.5

In PAN-OS 11.0, you can now skip up to

...

A.Otsu by L0 Member
  • 714 Views
  • 5 replies
  • 0 Likes

Problems for deactivate cyserver Cortex XDR

Hi team

Is there any way to disable this service? Even if I run the commands cytool protect disable or cytool runtime stop, it won't let me disable it, I get the message Access is denied.

 

Regards

 

Alpalo_0-1743697113968.png
Alpalo by L4 Transporter
  • 312 Views
  • 1 replies
  • 0 Likes
  • 24007 Posts
  • 115 Subscriptions
Top Solution Authors
Top Liked Posts
Top Liked Authors
Labels