This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 1813 Views
  • 0 replies
  • 0 Likes

HA Pair licence

Hi,

I have to 2 PA firewalls with HA Pair licence onboard. I want to reconfigure them to work separately. Is it possible? What licence says about that? If it's written somewhere in docs, where I can find it?

Resolved! FaceBook Games

Is there a way to effectively block FaceBook games?

I found this: https://live.paloaltonetworks.com/t5/General-Topics/facebook-games-block/m-p/23675
but this is 2013 and not all games are Zynga's.

Resolved! Configure MAC based Security rule for SSL VPN User

Hi Team,

 

Is it possible to create a security rule based on Source MAC Address instead of Source IP Address?
My requirement is, I want to create a rule for our SSL VPN users which is having our Company owned devices only connecting to our network.
Do yo
...

SahulH by • L3 Networker
  • 6186 Views
  • 1 replies
  • 0 Likes

Can we configure pbf in shared gateway ?

We have configured two ISP link in Shared gateway (sg)

ISP 1 : sg1

ISP 2 : sg2

 

All LAN subnets are different Vsys. For internet access we are using shared gateway for all Vsys.

We have configured pbf rule in each Vsys for accessing internet over ISP 2 ,

...

Deepak_K by • L3 Networker
  • 2922 Views
  • 3 replies
  • 0 Likes

Resolved! PA-220 Throughput Explanation

Can someone please tell me the maximum Upload/Download speed in megabits per second for a PA-220 with app-id and all threat prevention/ips features enabled along with an ipsec tunnel? The data sheet is a little confusing and I understand that it base...

Resolved! Concurrent users of Palo Alto 3020 SSL VPN

Hello, I need to know how many concurrent users the Palo Alto PA-3020 device can support. I know what has capacity for 1000 VPN tunnels (Ipsec, SSL, ETC), and I understand that the PA 3220 supports 200 concurrent SSL VPNs, but how many concurrent use...

Lcarocas by • L0 Member
  • 3923 Views
  • 1 replies
  • 0 Likes

Changes to GP Gateway IP Pool

Hello,
Any idea if following 2 changes to GP Gateway IP Pool will affect the current sessions?

 

1) Expand the current pool from /24 to /22

2) Adding new pool entry

jkansal by • L0 Member
  • 2907 Views
  • 2 replies
  • 0 Likes

ha_nat_policy_mismatch counter

Hi Everyone,

 

What exactly does the below counter indicate and what would trigger it? 

ha_nat_policy_mismatch

I have added L3 interfaces to an existing A/A HA cluster that uses vwire interfaces in an asymmetrical traffic environment. The traffic on thos

...

ha_nat_policy_mismatch.png
ABurger by • L0 Member
  • 2500 Views
  • 1 replies
  • 0 Likes

Bulk update of objects

I have a requirement to update the 100s of /32 address objects which do not have a CIDR.  Does anyone know of a script or other means to do a bulk update of the addresses to append CIDR?

Resolved! i2c bootup errors (PA200)

A friend of mine found a PA200 at a thrift store for $5.00 (without a power supply) I plugged it in today to see what state it was in and it looks like it had a rough life... All the guts are still inside and everything is clean and connected however

...

IMG_20200310_201325.jpg
hshawn by • L4 Transporter
  • 4853 Views
  • 3 replies
  • 0 Likes

Global Protect won't connect to Iphone MAC

Hello All,

 

We have Global Protect License for mobile we upgraded recently to 5.0.8 and i see my iphones will not connect.

did any one face this issue ? Works fine with  windows and desktops only with iphone i face the similar issue.

Any help will be mu

...

MilanP by • L0 Member
  • 3710 Views
  • 3 replies
  • 0 Likes
  • 24242 Posts
  • 117 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2025 - Palo Alto Networks