This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4474 Views
  • 0 replies
  • 0 Likes

Resolved! PA820 high availability configuration

Hello, I'm needing some clarification on one aspect of deploying a 2nd redundant PA820 in high availability mode. I currently have my 2nd 820 deployed with the management interface configured. My first question is. When setting up my 2nd PA i discovered that I only have 10gb sfp's for interfaces that I'm matching on my current PA. The quest...

danoman2 by • L3 Networker
  • 3505 Views
  • 2 replies
  • 0 Likes

Resolved! PAN-OS version upgrade all interfaces are showing Down.

I went to upgrade my PAN-OS from 8.0.6 to 8.1.12. When i Install base version (8.1.0) so all interfaces are show gray. After that i downgrade my PAN-OS to same version but still same. I use to "show jobs processed'' so autocommit fail. please let me know what can i do. 2020-02-13 22:56:34 22:56:34 12 Exec ACT PEND 10%2020-02-13 22:54:49 22:54...

Resolved! Trial URL Filtering License Reset?

Hi community, I have a customer who's previous manager trialed the free 30-day URL Filtering license back in 2017 on their current devices. However, a new manager has joined and they wish to retrial.... is this possible? Can the trial auth code be reset or something? Customer doesn't to purchase HA URL Filtering licenses until they can thoroughl...

PA syslog app id - problems

Hi so 5220 - 9.0.5 I have a syslog client and syslog server.the path goes through my PA.I have a rule basically says any internal ip is allowed to the syslog server if the app it syslog that doesn't work, the packets are too short for the PA to distinguish them .. sigh so add in unknown - udp . now they go through. next problem tcp syslog on po...

Resolved! Cortex data Lake deactivation

Hello guys, I had done POC of Cortex Data lake on my gateway. And it was successful. Now i've disabled sending logs on cloud, also my eval license is also expired. But as per traffic logs seen on my gateway, i can still see logs getting forwarded to cloud from my gateway's mgmt interface. Is there anything that i am missing to disable same ? P...

GlobalProtect For Linux

Hi, I want to add linux globalprotect agent on my portal for customers. How can I do that? Ubuntu and centos for both. Thanks for help.

Palo Alto 3050 high DP and MP planes CPU utilization

Hello Folks, I have upgraded my palo alto HA cluster (model 3050) to version 9.0.3-h3. All of sudden i have started facing high dp as well as mp planes cpu utilization. There is no much traffic on the firewall. Connection table utilization is also around 20% in peak time. Wanted to check if it is anyone has come acrossed such issue..? Thanks!

Configuring external connection through a switch

Hi,Initial config query! We currently have 2 leased lines going into a managed switch for failover capabilities with then a single cable going into our existing firewall (Zywall).This weekend we would like to switch out the existing firewall with our new PA-850 but retain the managed failover switch within the dataflow (this will be replaced in ...

fa2019 by • L0 Member
  • 5748 Views
  • 4 replies
  • 0 Likes

SSL decryption( Some traffic is not decrypted)

Dear All, I have applied SSL forward decryption in my Paloalto, then i observed some traffic are decrypted and some traffic not decrypt.Example:- I have applied the decryption in social-networking (Facebook traffic is decrypted but Snapchat traffic is not decrypted,however, both are falling under the social-networking category.) Why it's strange...

Diplay file in disk folders

Dears,when I apply following commandshow system disk-spacemany folders displayed. can you help me to display all files in this folders (/opt/pancfg,/opt/panrepo, /dev/shm, and /opt/panlogs) ?Filesystem Size Used Avail Use% Mounted on/dev/sda3 3.8G 1.1G 2.5G 31% //dev/sda5 7.6G 2.1G 5.1G 29% /...

Wildfire False positivs ... more than usual

Hi community In our environments we start getting more and more fals positivs from wildfire where documents (mainly docx and xlsx) are flaged as malicious without any reason, or at least a reason without details in the WF report. I wonder if you see the same over the past about 7 days?

Remo by • L7 Applicator
  • 4104 Views
  • 3 replies
  • 0 Likes

User dropped when uses GlobalProtect

Hello. I have an issue when users use GlobalProtect to access internal resources (my policy is restricted by username).PA Release: 8.1.11GlobalProtect: 4.1.12-3 Initialy they access without any problem the whole set of resources and we see the user is identified by the User-ID. -----------------admin@PA1(active)> show user ip-user-mapping all...

JuanAn by • L1 Bithead
  • 4271 Views
  • 3 replies
  • 0 Likes

OSPF BPA PARAMETERS

Hi Everyone, We r using OSPF over IPsec tunnel.We have two tunnels and failover dynamiclly.But when we r shutdown one tunnel there r many pinng loss(10 ping loss).We want to minimnize this value.Did any one do that before? Which value we should use for this config?

  • 24379 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks