General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4111 Views
  • 0 replies
  • 0 Likes

Resolved! SIP traffic being dropped in drop.pcap without log on PAN OS ver 10.2.4-h10

Hi Team, I'm getting SIP traffic drops on drop.pacp without any logs on traffic monitor or in the global filter. i have SIP-ALG disabled and i have a policy to allow the expectect communication. My PA-460 is dorping some SIP packets, not all for the same comunicattion, just te request Message packets seems to be droped. Can you help me t...

Evaluation ESXi shutdowned

I testing Evaluation for ESXi PA-VM-ESX-10.2.5.vm_eval.ovaSuccessfuly,installed.But, after PA-VM login: indicated, I cannot login in entering default admin / admin.and,a few minutes later,PaloAlto-VM is shutdowned. Even I tried several times,it occured it everytime.Please help to address this issue.

Static default route setup for DHCP client WAN interface

Hello All I would be much appreciated if you can help with setting up my static default route which I believe is the culprit why I'm not able to route data traffic to internet. eth1/1: WAN interface, the interface is set as L3 untagged, configured DHCP-client for IPv4. ISP assigns a new IP every 10-12 hours and the bridge-mode cable modem...

static route setup.png
routing table and metric.png
Screenshot 2023-08-19 at 23.49.57.png
SNAT rule.png

Limited CLI Rights

Howdy All! We are in need of finding a way to give a help desk individual limited access to the CLI to run a Python script to clear addresses from the DoS Blocked-Table. The 2 commands it is running is the debug dataplane show dos block-table debug dataplane reset dos zone <zone> block-table source <ip address> What I have foun...

double nat

hello, my palo alto pa440 wan is connected to another firewall who is connected to the isp with a public ip natted to my firewall.i have to setup an ipsec tunnel i don't understand if i have to use the public ip or the vlan ip as local peer ip address thanks

Gruppoes by L0 Member
  • 1003 Views
  • 2 replies
  • 0 Likes

Microsoft Directory Services/ms-ds-smbv3 - Virus/Win32.WGeneric.yurld?

We are see numerous alarms from our SIEM from our Palo Alto firewall. Here is a copy of a scrubbed log message below. When asking the user about their activity, they only RDP'ed into various servers from their laptop via the Globalprotect VPN for remote admin work and ran a batch file that re-maps drives. Additionally they noted browsing to \\&l...

rosy876 by L0 Member
  • 619 Views
  • 1 replies
  • 0 Likes

Need assistance with troubleshooting Routing between 2 VR's that are connected via BGP

Hi, We have two VR's setup NSWHealth_VR and HSP_VR and there is BGP connectivity between them. We can see routes are exchanged between them. However, for one particluar route eg: 10.24.x.x/13 on HSP_VR we can see it on the loc-rib but not on the RIB-out. All other routes are working fine. Only this particular subnet is having issue. We have chec...

Unable to Register Devices - Please contact Support

Hi - just bought 3 No. PAN-PA-220 devices. I've tried to create a New User via support.paloaltonetworks.com but just keeps coming back "Error: unable to create user account. Please contact Support." I wish to get these registered. Can anyone help on this please? All the serials have been entered, the Sales order info & all the "*" fields...

JonNewson_0-1585908918962.png

Transfer of an Asset to new Account

I am aquired a PA 220 for my home lab for learning and education purposes. I created an account with a commecial paid domain account. I provided the email to the person whom i aquired the device from so they could transer the asset to me as new owner and i could all set up correctly. Currently if I try to login into CSP i get and error. They in...

stephen by L0 Member
  • 843 Views
  • 1 replies
  • 0 Likes

Cannot download PAN-OS in passive device

Hello, When I try to download PAN-OS software directly to the passive firewall it says “Failed to check upgrade info due to generic communication error. Please check network connectivity and try again”. It is working fine in Active device. Is it the case in active/passive scenario, the passive can’t talk unless it takes over? I have checked all ...

Farzana by L4 Transporter
  • 8360 Views
  • 5 replies
  • 0 Likes

Resolved! Not able to view Anti-Virus updates under dynamic updates

Hi Team, We are having PA-3050 and had renewed our license recently. When checking under Dynamic updates we are not able to see the Anti-Virus update column. Also under the Security Profile we are getting an display as Url-filtering license and Threat Prevention license as expired. We had checked the Advanced URL filtering license and also the ...

tamilvanan_0-1638886951253.png
tamilvanan_1-1638886973750.png
tamilvanan_2-1638887086359.png

Resolved! Artificial Intelligence

Hello, What is best practice for the "AI" 1) Code Assistant 2) Conversational Assistant 3) Writing Assistant 4) Media Service 5) Data and Workflow Optimizer 6) Platform Service 7) Meeting Assistant 😎 Website Generator Currently all of these categories within our firewall are allowed - I'm not sure this is how it should be. Any advice would...

rcraxton by L2 Linker
  • 2569 Views
  • 6 replies
  • 0 Likes
  • 24332 Posts
  • 124 Subscriptions
Top Solution Authors
Labels