This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Showing Active Debugs

Hi All, I come from a Cisco background and now getting to play with PAs 🙂 I have a few queries around debugging from CLI. Can we debug multiple different protocols at the same time, e.g Phase 1, 2 for VPNs, maybe some ARP resolution at the same time?Can we get this debug output to the CLI in real time? (if not, how can I view the output).How c...

GlobalProtect with machine cert

Hi,I'm having a challenge with GlobalProtect when trying to do ldap authentication with a machine cert (from internal MS pki). I've tried both the computer and workstation authentication template, but neither worked. GlobalProtect states certificate is missing. I'm not doing pre-logon, I have GP set to always on. In GP portal app setting, ...

ce1028 by • L4 Transporter
  • 7925 Views
  • 6 replies
  • 0 Likes

Resolved! PAN self-cleanup

Does all the partitions showing below has self cleaning Capabilities or there is a need to manually clear those files like for eg I know old downloaded software can be deleted to free some space from panrepo partition? Filesystem Size Used Avail Use% Mounted on/dev/sda3 16G 5.7G 8.7G 40% //dev/sda5 16G 2.2G 13G 16% /opt/pancfg/dev/sda6 12G 5.0G...

Resolved! Want detach Gateway from Panorama

Hello team, We have around 10 HA cluster managed through Panorama. now we need to detach/remove one HA cluster from it. Please guide me on the steps to be followed without creating any impact on production. Also please confirm if it need downtime.

BK0007 by • L2 Linker
  • 5108 Views
  • 4 replies
  • 0 Likes

Panorama M-100 Hardware vs installing in ESXi

Hey Everyone,My company is looking at implementing Panorama to update and monitor the other firewalls we have at other locations. Does anyone recommend the Hardware like the M-100 over just installing it on a server using ESXi? Thank you!

2X of PA820 Active/ Passive Design question

Hi All After some advice, planning to have 2 X PA820 pairs of Active/ Passives, Inner and outer firewalls protecting some internal networks. See the diagram, Does the HA2 link pass data plane traffic at all? Or can it? There could be a scenario that one set of FW's can failover and the primary unit of one trying to speak to the standby unit of ...

Capture.JPG

Global Protect Policy enforcement

Hi All , I have an issue Is there a way to use Global Protect to enforce web or URL filtering policies when users are not on the corporate LAN ? for now, when users work remotely , they bypass all web and URL filtering and security policies and download whatever threats they want. Regards

Remove HA config from template of managed firewall pair

Hi,i have a pair of active-standby firewalls, managed by Panorama. My first attempt, when i imported those to panorama, i pushed one template to both firewalls and had issue with HA IPs, causing split brain.I recovered the firewalls and later imported and pushed templates from panorama, keeping separate ones for both active and standby Question ...

josggf by • L2 Linker
  • 6146 Views
  • 3 replies
  • 0 Likes

Resolved! PAN-OS 9.0.6 API Curl JSON output

I'm working on a project to get information from the Palo Altos and use it for an input to a SIEM. I'm able to run the below and get XML output.curl -k 'https://<PAN>/api/?type=op&cmd=<show><system><info></info></system></show>&key=<KEY>'I would prefer getting this in json so I tried &...

jwhughes by • L1 Bithead
  • 12394 Views
  • 10 replies
  • 0 Likes

Resolved! core file crash info

show system files show -rw-r--r-- 1 root root 653 Dec 2 18:54 all_pktproc_34_8.0.9_37.pcap-rw-rw-rw- 1 root root 30K Dec 2 18:55 all_pktproc_34_8.0.9_37.info how can i know why system crashed? will this crash any outage to MP or data plane?

MP18 by • Cyber Elite
  • 15988 Views
  • 5 replies
  • 0 Likes

PAN config for ansible jinja

Hi, I am trying to create a configuration template which I can change certain variables and pushed the config to multiple firewalls.However PAN is not behaving the way I need. I have two problems which seems to be related to PAN's design.1) Even if you fetch the config in set mode and pasted in back in CLI due to strict reference check it fail...

IPSEC VPN Needs to be disconnected when there is no traffic

We have several IPSec tunnels that connect to 4G devices to provide network access in the event of a primary circuit outage. These tunnels do not disconnect after the primary circuit comes back up. Is there a way on the PAN side to disconnect an IPSec tunnel if there has been no traffic on it in a given amount of time?we are using IKE V1 and sta...

snimshad by • L1 Bithead
  • 4851 Views
  • 3 replies
  • 0 Likes
  • 24392 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks