This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Monitoring BGP stats using SNMP

Hello,I can't find an OID that gives me the BGP stats, these stats can be retrieved on the webgui.I don't need to setup snmp traps, I need the oids for monitoring purposes only and not alerting.Firewall model: PA-5020 Sw version: 7.1.10Can someone help me to find them please?Thanks

nabbate by • L1 Bithead
  • 12952 Views
  • 9 replies
  • 2 Likes

Resolved! Rapid Deployment of Small PANs at Spoke Sites

I have dozens of small offices across the country and dozens more coming. My predecessor put in DMVPN with Cisco ISRs at the spoke sites. I'm thinking to replace the ISRs with PAN 220s or similar.The only downside is they don't have POE for the access points. But should be able to work aroundthat somehow. My question is how to most rapidly and ...

Global protect DNS name resolution.

Hello Experts,Through global protect, users are getting IP address from the pool and take network setting as defined including primary DNS and Secondary DNS.but the users want to access servers via name(s) not IP addess(es). Since it was working before with cisco remote vpn.Please let me know is there any setting in global protect gateway to mak...

SSL Decryption - Intermediate Cert renewal

Hello, we are implementing Inbound SSL Decryption. The plan is to import the keys from our F5 Load Balancer. After a number of attempts and working with support, we found the only way for the import to work successfully is to import the bundle (CA / Intermediate / Certificate for the VIP). While that process works, it leaves us with the q...

Resolved! MS O365 ip address range

Hi Any one know if PA have a dynmic range that covers MS ip address range. Seems like the sort of thing that would be easy to implement and would save me a lot of time.A

Resolved! Question on removing Panorama template from firewall

Hi All, We have an active firewall with Panorama policies still applied in a read only state- unfortunately the panorama server no longer exists with the local firewall having no connection back to a serverWe wish to remove the panorama settings on firewall but still keep Panorama policies in the local configuration. From the KB article it stat...

HGreen by • L0 Member
  • 6953 Views
  • 3 replies
  • 0 Likes

Resolved! Cisco IP phone is not registering to server

Hi all,I have Palo alto in my network connected to CISCO Call manager server and Cisco DX650 IP phone. I am facing issue that DX 650 is not registering to Call manager server when I capture log I found that the traffic comming from Call manager server and IP phone into Firewall is completing TCP connection but when outgoing traffic from firewall...

Terminal Services Agent in Windows 2016 Citrix - SMB-Sessions not mapped to user

Dear community, we're running W2K16 servers here using Citrix. We also installed the latest TSA and when a user logs in he is properly recognized on the firewall and the TSA assigns a port-range dedicated to the user.When establishing new TCP-connection that is also properly recognized on the firewall and permissions can be granted depending on ...

Client IP visibility issue at Remote Server

Hi Team,Below is possible in paloalto side? Note: there is no proxy in between client and paloalto Problem description :The clients behind PA firewall connecting to AWS NLB then connecting to our AWS web servers(https:// tallysolutions.com). Now we are not able to see the actual client ip address in the AWS Web server. To resolve this issue AW...

URGENT Email alert

Dear Team, One of our client want to set email alert for data plane CPU threshold will be 60% for this.I checked it but found only option, where we can set an alerts on the basis of even severity. Need your help in this to set email alerts for data plane on certain threshold values.Kindly provide if you have any KB to configure this.

Resolved! URL category as "Any"

Hello Team, I have one customer query related to security policy with URL category. Customer query: When the SNI/HTTP header is missing and the URL Category is classified as ‘any’, the processing of that session should be moved to the next security policy that matches the URL category of ANY, that also matches the source, destination and port. I...

Palo Alto login failovers from TACACS to local

Hello guys, I have one requirement for pointing request to TACACS for login. If TACACS fails then only local login should work. Currently when i am configuring authentication sequence where TACACS is first priority and 2nd is local but it seems gateway is accepting both logins. Is there any way we can tune this to primary tacacs and if tacacs fa...

After upgrade my firewall not able access GUI

HI,I have upgraded my firewall 8.1.12 version, after that I am not able to access my firewall through GUI. I have gone through the logs , might be some files are missing after upgrade. can any once check logs and let me know if found any thing. below is the logs:-

img1.PNG
img2.PNG
img3.PNG
  • 24466 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks