General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4118 Views
  • 0 replies
  • 0 Likes

Resolved! Cortex data Lake deactivation

Hello guys, I had done POC of Cortex Data lake on my gateway. And it was successful. Now i've disabled sending logs on cloud, also my eval license is also expired. But as per traffic logs seen on my gateway, i can still see logs getting forwarded to cloud from my gateway's mgmt interface. Is there anything that i am missing to disable same ? P...

GlobalProtect For Linux

Hi, I want to add linux globalprotect agent on my portal for customers. How can I do that? Ubuntu and centos for both. Thanks for help.

Palo Alto 3050 high DP and MP planes CPU utilization

Hello Folks, I have upgraded my palo alto HA cluster (model 3050) to version 9.0.3-h3. All of sudden i have started facing high dp as well as mp planes cpu utilization. There is no much traffic on the firewall. Connection table utilization is also around 20% in peak time. Wanted to check if it is anyone has come acrossed such issue..? Thanks!

Configuring external connection through a switch

Hi,Initial config query! We currently have 2 leased lines going into a managed switch for failover capabilities with then a single cable going into our existing firewall (Zywall).This weekend we would like to switch out the existing firewall with our new PA-850 but retain the managed failover switch within the dataflow (this will be replaced in ...

fa2019 by L0 Member
  • 5628 Views
  • 4 replies
  • 0 Likes

SSL decryption( Some traffic is not decrypted)

Dear All, I have applied SSL forward decryption in my Paloalto, then i observed some traffic are decrypted and some traffic not decrypt.Example:- I have applied the decryption in social-networking (Facebook traffic is decrypted but Snapchat traffic is not decrypted,however, both are falling under the social-networking category.) Why it's strange...

Diplay file in disk folders

Dears,when I apply following commandshow system disk-spacemany folders displayed. can you help me to display all files in this folders (/opt/pancfg,/opt/panrepo, /dev/shm, and /opt/panlogs) ?Filesystem Size Used Avail Use% Mounted on/dev/sda3 3.8G 1.1G 2.5G 31% //dev/sda5 7.6G 2.1G 5.1G 29% /...

Wildfire False positivs ... more than usual

Hi community In our environments we start getting more and more fals positivs from wildfire where documents (mainly docx and xlsx) are flaged as malicious without any reason, or at least a reason without details in the WF report. I wonder if you see the same over the past about 7 days?

Remo by L7 Applicator
  • 3996 Views
  • 3 replies
  • 0 Likes

User dropped when uses GlobalProtect

Hello. I have an issue when users use GlobalProtect to access internal resources (my policy is restricted by username).PA Release: 8.1.11GlobalProtect: 4.1.12-3 Initialy they access without any problem the whole set of resources and we see the user is identified by the User-ID. -----------------admin@PA1(active)> show user ip-user-mapping all...

JuanAn by L1 Bithead
  • 4181 Views
  • 3 replies
  • 0 Likes

OSPF BPA PARAMETERS

Hi Everyone, We r using OSPF over IPsec tunnel.We have two tunnels and failover dynamiclly.But when we r shutdown one tunnel there r many pinng loss(10 ping loss).We want to minimnize this value.Did any one do that before? Which value we should use for this config?

Resolved! Destination NAT to other Port

Hey all,there is a ssh server in an internal network. I want to access that server from public, but with source port for example 11111. The server listens on normal ssh port 22.So I would like the firewall to do a port translation from 11111 to 22.Is that possible?

MPI-AE by L4 Transporter
  • 9309 Views
  • 4 replies
  • 0 Likes

Resolved! Allowing Ads

I have a user who would like access to be able to view ads. This may or may not be a good practice, but I would like to know if this is able to be granted. For example, we granting access to something such as Facebook, I can create a policy and grant access by specifying the Facebook application. Is there something similar when it comes to grant...

Resolved! Authentication - Users are not matching with groups

Hello, I have a problem with authentication. I have configured a PAN integrated agent. I can see users authenticated. At the same time, the firewall is getting the groups from AD. But for some reason, the users are not matching with the groups. So the policy based on the group that I configure is not logging traffic. Users and groups are in NE...

iscott by L2 Linker
  • 8244 Views
  • 3 replies
  • 0 Likes
  • 24334 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels