This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Scheduled Maintenance: November 14–15 (starting Nov. 14 at 12:00 AM PST)
LIVEcommunity will temporarily operate in read-only mode as we prepare to welcome Idira!
Public content will remain accessible, but log-ins, posting and community interactions will be paused during this period. Thank you for your patience!
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Virus/win32.wgeneric.ajgdai id 341892366

Hi Team, I have issue. One user connect to SSL VPN, and cannot ping one IP 192.168.1.11. Only one IP. after i checking at firewall, I found this users got blocking activity Threat Name virus/win32.wgeneric.ajgdai id 341892366. But when this users using mobile hotspot. him can ping this IP address 192.168.1.11. Palo Alto PA-220 Thanks

Resolved! VmFirewall on Xen?

Hello, good morning. I have purchased the vm300 virtual firewall.I have seen that no downloads are available for the XEN hypervisor at this time.There are for vmware, kvm, citrix netscaler, etc.I finally got the vmware virtual machine running on Xenserver after adding some xen libraries so that the parts could communicate correctly.But I wonder ...

Resolved! Certification profile in global protect

Hello All, I have configured the GP with authentication of credentials(Username and password) as well as the certificate profile.When I connect the GP agent it is connected successfully.My question is how we make sure GP is using a certificate profile for authentication. because when I see the authd.logI am not able to see any specific authentic...

Resolved! DNS Proxy feature

Hey guys, I've read about DNS proxy and how it works. My question is, what are the benefits of using DNS proxy on the firewall? This obviously gives the Palo insight into the DNS responses, but if the DNS traffic traverses the firewall it can snoop in on the DNS anyway. I don't see anything specific to DNS under logs to even show the DNS interac...

Global Protect // Multible post-vpn-connect scripts

After connecting with Global Protect I execute an post-vpn-connect script to mount the users network shares. I execute them in the context of the user.Unfortunately, I need to execute another post-vpn-connect script in the context of an admin. Does anybody know how to execute two different post-vpn-connect scripts with differet user contexts? R...

BHaaf by • L0 Member
  • 4724 Views
  • 2 replies
  • 0 Likes

Mac computer GlobalProtect with Computer Cert How To

Below are the instructions that I have cobbled together to install GlobalProtect on a Mac and not have the system ask for authentication of an administrator at each connection. Full document with pictures is available on my GitHub.https://github.com/scriptingcaveman/PaloAlto-Documents The use case that led me to these directions is a non-admini...

Office 365 JSON-to-flatfile converter as EDL feeder

Hi PAN Community,How's everything going? I hope everyone is well and safe. I know there are plenty of MineMeld fans out there but just in case MineMeld deployment is an overkill for your organization and Office 365 security is a burning item in your task list, I thought I'd share a simple and elegant solution that has been running in my setup fo...

SFP Virtualwire on PA-820

Hi,I configure my device to virtualwire mode with sfp baseT transceiver but it wan't to work (they are red in GUI).When I change to Layer3 mode everything work corectly (change to green).In CLI I can see transceiver.Have you got similar problem or any advice what should I do?

KamWes by • L1 Bithead
  • 3887 Views
  • 4 replies
  • 0 Likes

Global Protect Access routes

Hi,I have question for access routes. We have configured global protect and advertised only one access route however after connecting to global protect VPN, we can see multiple access routes in client machine. Is there any other criteria for access routes to be advertised?

gpandya by • L1 Bithead
  • 8671 Views
  • 5 replies
  • 0 Likes

IPSEC VPN Phase 2 issue-Peer Checkpoint

I have 15 proxy-ids in the vpn tunnel whose peer is checkpoint firewall. Just one out of 15 usually remains really busy and lot of traffic get encap/decap on it. Remote users accessing resources within other 14 proxy-ids have absolutely no issues but they occasionally loose connectivity to those that are in the busiest proxy id and it recovers ...

Resolved! dedicated log collector setup and licensing

hi,I am preparing a new environment (my plan is for 2x management only + 2x log collector only) and have no experience with dedicated lot collectors yet. Please help me to clarify few things:- log collector for sure needs licenses, are they the same like for management only ?- can i stack log collectors to get more storage? If so, logs are load ...

PANORAMA COMMIT AND PUSH TO FIREWALL FAILS WITH ERROR

For the last few days, we have been trying to import firewalls into Panorama and have not been successful at it. Panorama firmware is 9.0.7Palo Alto firmware: 8.1.13 Description of issue: During the importing process, I was able to extract the configs from PA firewall onto the Panorama. However, when I tried to commit the configs back to PA fire...

Captive Portal SSO w/ Okta - "User Authenticated"

We've implemented Okta SAML SSO with our layer-3 Captive Portal redirect page for IP-User mapping. The solution works, but users are landing on a "User Authenticated" web page, rather than the website they originally browsed to. Users now have to re-browse to the website first landed on, or browsed to to access the site. I figured SAML SSO would...

2020-02-19 11_54_24-Program Manager.png
  • 24481 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks