General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 266 Views
  • 0 replies
  • 1 Likes

High management cpu usage on PA-820 with PAN-OS 9.0.4

Hello everybody,

 

  I know it is a faq already asked on the community forums, but in this case it is especially related to this particular configuration: PAN-OS 9.0.4 on a PA-820.

 

Starting from the day I installed 9.0.4 on this machine, I see the mana

...

grenzi by L3 Networker
  • 9723 Views
  • 3 replies
  • 1 Likes

Access to Panorama after upgrade to 8.1

Hello

After upgrade Panorama to 8.1.11 I can't connect to GUI via proxy server (proxy server just substitute own certificate) I can reach login page but after putting credentials to Panorama I see blank page.

Before upgrade access was ok.

Direct access

...

polak71 by L1 Bithead
  • 1777 Views
  • 1 replies
  • 0 Likes

Resolved! Global Protect User Groups

I want to user map configuration to AD user group for Global Protect clientless VPN. This works quite will if authentication is LDAP.
Have you any idea how can I get it to work with Radius authentication?  Presuming that the user has the same name as

...

BatD by L4 Transporter
  • 2708 Views
  • 3 replies
  • 0 Likes

Resolved! scp export log traffic to a server not using port 22

Hello,

 

I'm trying to send an export of traffic log to a server that use port 40111 instead port 22.

I'm using this command in Panorama:

 

scp export log traffic to pppp@1.1.1.1:40111

 

But receive a timeout indicating that host 1.1.1.1 hasn't available po

...

bprietoc by L1 Bithead
  • 3236 Views
  • 2 replies
  • 0 Likes

Resolved! Rule usage report in PanOS 8?

Is it possible to create (scheduled) rule usage reports in PanOS 8, ideally from Panorama on a per device group basis? 

I see the rule usage data present, seems silly there wouldn't be a capability to query against it.

Rules (not) used withing last X d

...

BoDollis by L1 Bithead
  • 3888 Views
  • 3 replies
  • 0 Likes

Debugging packet flow.

Hi there,

 

We have just moved from a Juniper SSG-550 with around 700 policies to a PaloAlto 3050.

Naturally this has thrown up a few issues!

 

Can anyone explain how to do the equivalent of a Juniper “debug flow basic” on the PaloAlto?

 

On the Juni

...

Blocking vs. logging throughput

If I have a security policy applied to all my zones which includes profiles for everything (AV, spyware, vulnerability protection, etc.) but the actions are all just logging or alerting and not blocking, would that affect my throughput?  I was wonder

...

Threat / AV signatures after OS EOL.

Will AV /  Threat Signatures still up date on 8.0 after EOL?

 

I only found out it was going EOL when I logged into another of our clusters with 8.1 which told me on the MOTD..

 

The MOTD on the 8.0 has no such message.

 

I have had  look through the "Palo

...

Resolved! Replacing a Palo

Hello -

We had one of our Palos die on us, we have the replacement and I have read this document: 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHFCA0

 

But, I'm hoping someone on here can give me some real world experience

...

Shawverr by L3 Networker
  • 3466 Views
  • 2 replies
  • 0 Likes

Resolved! PA-500 VPN with Amazon VPC

Hello,

have someone a howto about connecting a PA-500 with the Amazon VPC Service?

It would be nice to take a look on it

best regards

Dietmar Otto

PA session end reason is decrypt error -

 

 

In PA i  saw this behavior for session end reason is decrypt error and traffic is working fine.
I check with users where session end reason is decrypt error they told me they have no issues.
we have ssl decryption enabled and PA is running 8.1.9
IS th

...

MP18 by Cyber Elite
  • 15796 Views
  • 2 replies
  • 0 Likes

Resolved! PA-850 & Radius PEAP

We had purchased a pair of 850s to replace a pair of 3020s.  Over the weekend I had put the 850s into place and we immediately saw problems with clients authenticating to our radius server behind the 850.  We're working with PA support but they seem

...

VPN S2S and Description ssl in Wires mode

Hello, I have a couple of doubts and I would like you to help me about it. 1.- Is it possible to perform an Ipsec VPN when the firewall is in V-Wires mode? Only having an IP in the administration interface? 2.- Is it possible to perform SSL decryp...

Lcarocas by L0 Member
  • 2496 Views
  • 2 replies
  • 0 Likes
  • 23632 Posts
  • 107 Subscriptions
Top Liked Authors
Labels