General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Email sending times out when GlobalProtect connected

Hello, 

 

one of my colleges has an issue when GlobalProtect VPN is connected, the sending emails in outlook times out and all emails stay in the outbox. SMTP port is 8025

 

please help me with any hint, read through google results and could not solve th

...

Problem with Support Account

Hi,
I've just created an account with a PA-220 associated to it following the official documentation found in 
https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/getting-started/register-the-firewall#

I've finished the activation of the account b

...

QOS to a specific webpage/service for admin staff

Greetings

 

I awhile back asked the company that initially setup and installed my palo alto to set up a rule so that my admin staff will not have issues reaching a specific website. but i dont think they did it properly.

 

As a school of about a thousand

...

Clientless VPN Web Page redirection Issue

Hi all,

 

I published one of web service through clientless vpn (OS 8.0.13). After authentication Its not loding properly. I go through developer tool (F12) its given following screen.please help.

 

 

Thanks,

Lakshitha.

Bird.JPG

Forticlient connecting but no traffic goes through

Hello,

 

I am trying to use Forticlient to connect to a remote network outside our coporate network.

 

The connection is successfully established, it seems that the traffic is sent but no traffic gets received from the Forticlient.

 

 

Anything needs to be

...

Screen Shot 07-22-19 at 02.06 PM.PNG
AGAGroup by L1 Bithead
  • 5774 Views
  • 4 replies
  • 0 Likes

GP switch from 'pre-logon' user to 'logged in' user

Hi,

 

We have got global protect pre-logon set up and pretty much working now after quite a few issues.

We still have one issue, although the pre-logon user connects fine when starting the end device prior to logging on (says connected on the windows sc

...

GP Client on MACs does not always detect internal network

We have an issue that seems to be impacting our MAC users only.  They connect to an internal wireless network, but the GP client does not detect that they are on the internal network.  (We're using the always-on feature.)  We've reduced the timeout t

...

ktunkel by L0 Member
  • 2473 Views
  • 1 replies
  • 0 Likes

NAT Configuration to access Remote Desktop

Hi,

We need to configure an input rule to authorize an public IP address to access at one of our virtual machine on our subnet.

Concretely, I need to authorize public IP address 195.193.194.195 access directly to our virtual machine with the private IP

...

feelgood by L2 Linker
  • 12645 Views
  • 10 replies
  • 0 Likes

SSL Decrypt & Windows Updates

Hello,

 

I've been having a problem with Windows Updates when SSL Decrypt is turned on and I'm wondering if anyone else had to add these "new" Microsoft URL's to the decryption exclusion list. My firewall is on version 8.0.3 and my Windows version is W

...

kalakai by L2 Linker
  • 7399 Views
  • 3 replies
  • 5 Likes

PA is dropping SYN packet with ECN and CWR

Hi Team, @reaper , @BPry 

 

Recently I have come across a scenario that palo alto was dropping TCP SYN packets which have ECN and CWR bits set. upon checking the global counter, i have seen that the drop reason was 'process owner message err, no predic

...

Resolved! Agentless User-ID - change password

Hi 2 all

 

We have working Agentless User-ID and User-Based and Group-Based Policy

Special AD-account, "pauser" have necessary permissions.

 

I found, what its login and password is configured in 

Device > User Identification > User Mapping > WMI Autentica

...

aaobuhov by L2 Linker
  • 2919 Views
  • 1 replies
  • 0 Likes
  • 24204 Posts
  • 100 Subscriptions
Top Liked Authors
Labels