This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Unable to Change GUI Management Port on PAN-OS 11.1.6

Hi team, I'm trying to change the default HTTPS GUI port (443) to a custom port (e.g. 8443) on firewalls running PAN-OS 11.1.6. I'm accessing via the management interface, but I don't see the option in the GUI (Device > Setup > Management) or in CLI (set deviceconfig system web-server-port seems unavailable). Just want to confirm: 1. Has...

Kevin-Ng by • L2 Linker
  • 1612 Views
  • 1 replies
  • 0 Likes

Resolved! Can I use HA function on palo alto vm-series with out any license?

Dear all: My company wants to try update their palo alto NGFW. Before they do it, they need me try it on a test device that they can know the operate procedure and check there is no risk , so I download the software of palo alto FW, and I install it into vmvare. For keep the network structure similar to the business network, I need to c...

unable to add new object address to existing object address group

I created a new object address on my PA-5220 and whenever I edit an existing object address group, I cannot find that new object address in the list. I have committed the change to the firewall and confirmed other users see the object address and have the same issue. I went into the existing object address group and tried to add a new object ...

Jeromy by • L0 Member
  • 7768 Views
  • 6 replies
  • 1 Likes

Unable to View URL/Domain in Destination Address

Hi Friends, We have a customer who is only able to see the IP address in the destination field, as hostname resolution is not functioning correctly. However, he would like to view the URL or domain name along with the IP in the destination address. To troubleshoot the issue, I took the following steps: 1. Enabled the "Resolve Hostname" option ...

OSPF with Active/Passive HA

Hi, I came across this design guide and looking at labbing this up for testing, as the design could be a good fit for our production environment, with a few tweaks. In my case, I'll be using OSPF between the firewalls and internal routers A and B. The connections to the edge routers A and B will be the provider routers, so they will be outside ...

OSPF HA.PNG
rchung54 by • L2 Linker
  • 12591 Views
  • 8 replies
  • 0 Likes

Clear DF bit for VPN

We have recently migrated our site-to-site VPN so it is now running between a PA-3020 > Cisco ASA 5510. After the migration we discovered that one of our cross-site applications broke and the vendor determined it was because their application communicates in 1472 byte packets with the DF bit set. On our old VPN this was not an issue because...

Service Accounts and GP

Situation is this, a normal user logs into a PC and GP auto connects. User logs out and back in as a service account and GP does not auto login. Any ideas?

Resolved! SAML login remove lock (superuser?)

When I am logged in via SAML, I noticed that I was not able to remove other users' locks. Seems like this may be because I am not a superuser? Is there any way to make a SAML-authed user be a superuser?

Resolved! Zone Capacities per PA model

Looking to understand the maximum number of zones which can be used in a given firewall based on model. Is there a document out there which shows the maximum number of zones? Specifically these models:PA-445, PA460, PA1410, PA3420 If based on OS - I would be interested in 11.1.x

clewis1 by • L3 Networker
  • 2326 Views
  • 2 replies
  • 0 Likes

VOICE Issues

I got a PA-1410 ,it has IP telephony, and their server is in the cloud. The phones have an address 10.200.x.x/24 and make the registration request through ports 5060 or 5075 to a server in the cloud with IP 148.235.12x.x through the SIP application.The phones do not register, using the initial port, no matter which of the mentioned, for the exam...

F.Pinar by • L3 Networker
  • 970 Views
  • 2 replies
  • 0 Likes

Resolved! Tufin

Does anyone have experience using this in a larger environment? Multi vsys? Panorama? HA Clusters and so on. Are there better options available? Thanks in advance for your time.

  • 24456 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks