General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Files' upload problems

Hi.I'm searching for someone can help me.My problem started when I tried to upload custom logo for the login page.The upload fails becouse the process blocks itself and never ends.I had the idea to try the "Import named configuration snapshot" function in the same web page of PA3260 administration site.Thinking it would be failed, I used the log...

Denied traffic even though GlobalProtect HIP check passes?

Hi all, I have a PA-3020 that is configured for GlobalProtect. All is good as far as being able to connect to the VPN, but once I am connected I find that I'm having issues connecting to servers that are permitted in security policy, but have the HIP Profile attached. If I remove the HIP profile the traffic flows as expected. The HIP profile is ...

PA 820 to PA VM migration

we have implemented PA 820 in one of our client places now we are facing issues in hardware. We need to migrate the entire configuration to the PA VM series firewall. Let us know the procedure to migrate the entire configuration from PA 820 to PA VM Series.

SBAINFO by L0 Member
  • 3263 Views
  • 2 replies
  • 0 Likes

Global Protect with SAML Azure Authentication and disconnect tab on client

We have configured the global protect 5.0.6 with SAML Authentication.It is same authen profile on both portal and gateway. I have unchecked the authentication override on both portal and gateway.Seems when i connect to the client and when i disconnect it does not send me push notification on phone?Is this the default behaviour? When i click on s...

MP18 by Cyber Elite
  • 5970 Views
  • 5 replies
  • 0 Likes

Resolved! Management Interface Permitted IP Addresses & other devices

Hello all, Our PAN-OS Management Interface Permitted IP Addresses (on both Panorama and firewalls, version 8.14) contain IPs for the firewalls and both members of the Panorama cluster. These weren't set up by me and I'm wondering if that's necessary. I have read an article that said that that device configs, log retrieval, etc. are managed ove...

Resolved! Traps Uninstallation Issue

I’m trying to install the latest version CortexXDR 7.02 however I’m unable to remove the previous Traps installation that is still shown in the registry files. We are on current Traps agent 6.11.18549 and we can remove this successfully however unable to remove Traps agent 6.00.4961 This is what I’m using below in a batch file: (did not include ...

Resolved! Phone calls random failing to connect at remote locations - Cisco Call Manager

We are in the process of converting over to Palo Alto firewalls at our remote locations from ASA firewalls. A few of our sites now are having some strange issues when attempting to make phone calls.We are a Cisco call manager shop. Here is a basic setup of our network:Remote Office <-Site to site VPN tunnell-> Main Office Voice setup betwe...

Resolved! SSL inbound inspection delay

hey all, I've deployed SSL inbound inspection, connection gets really slow when SSL Inbound Inspection.It takes almost one minute for the page to be loaded. Without SSL it takes 2 secs. Would any of you have a clue what could be causing the problem?

WRibeiro by L1 Bithead
  • 6822 Views
  • 3 replies
  • 0 Likes

Show A Warning Page When Loading A Block Website

Hey,Is it possible to set up either a warning page or auto email to the specific user when trying to access a blocked site, currently it just doesn't load and wonder if I can set up a notification to the user that the following page is not allowed?

DHCP Server Reserve a long list of IP addresses

Hi everyone,I have a list with more than 50 mac addresses, I want to configure PA DHCP Server to reserve IP addresses to these MAC addresses, is there an easy way to make reservation instead of enter these 50+ records one-by-one? Thanks. Regards,Daniel

Custom miner, 'Commit Failed: unknown node class', no nodes.json file

Hi All, I followed the same steps as in the ytexample guide. https://github.com/PaloAltoNetworks/minemeld/wiki/How-To-Write-a-Simple-Miner Including putting my class in: /opt/minemeld/engine/0.9.68/lib/python2.7/site-packages/minemeld/ft By the way, this directory doesnt exist: /opt/minemeld/engine/core/minemeld/ft Im getting 'Commit Fai...

PA-850 for a home lab

Hello everyone, I'm looking to purchase a PA-850 for my home lab but after doing some research I have some concerns. I was planning on buying an 850 on eBay then getting the lab PAN-PA-850-BND-LAB4 through a VAR but I think I will have issues. Based on the article below and what I've researched, you can't simply convert a previously owned device...

User-ID Mappings Not Showing

Hi All, As the title suggest, I'm not getting any local user-ip mappings from our Active Directory Domain Controllers. if I do a "show user server-monitor state all" on the cli I can see the output below (I've removed the domain controller hostname and IP for anonymity) num of log query made : 304num of log query failed : 0num of log read : 0la...

  • 24412 Posts
  • 125 Subscriptions
Top Solution Authors
Labels