General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Failover Behaviors

Hi All, Setup: Active-PassivePath Monitoring: enabled, but not configured(nothing under that Path group)Version: 7.1.14 Would an Active firewall change its state to non-functional if both of its HA2/HA-Backup goes down? Related Logs:2019/12/04 09:41:04 critical ha ha2-lin 0 All HA2 links down2019/12/04 09:41:04 high ha session 0 HA Group 1: Ign...

Application Dependency Warnings after 8.1.12 upgrade

Hi all, I just upgraded all the firewalls from 8.1.7 to 8.1.12 to patch some vulnerabilities. After the upgrade, I am suddenly getting a bunch of application dependency warnings which I commit the configuration from Panorama. The configuration hasn't changed. The warnings are legit - but they weren't displayed before. Does anyone know why t...

TruStar IT-ISAC prototype?

Hi, I was wondering if any has been working on a Prototype to integrate IT-ISAC feed from TruStar (https://info.trustar.co/it-isac). As far as I now, this is a traditional TAXII server, not aware if they have an API too. I'll try to get more detailed information on how exactly works in the meantime. EDIT: They seem to support both: STIX ...

MarcelST by L3 Networker
  • 10973 Views
  • 8 replies
  • 0 Likes

Dynamic Updates and Device Registration Failing in GCP. HELP!!!

Ok Gurus, (including @BPry ) I got a need for some help and visibility on this one... please... My FWs are virtualized within a open source (KVM) environment, that was placed into GCP back in June 2019. Somewhere along this week, when I first noticed that I am not getting my Dynamic Updates, cannot retrieve license keys from license server, no...

SteveCantwell_1-1581260677752.png

Log Forwarding to Panorama is not happening from PANW firewall

show logging-status in firewalls -----------------------------------------------------------------------------------------------------------------------------Type Last Log Created Last Log Fwded Last Seq Num Fwded Last Seq Num Acked Total Logs Fwded-------------------------------------------------------------------------------------------------...

Empty "File URL" in "Data filtering"

Hi,I applied the default "basic file blocking" profile to the policy that allows users to access the Internet.In the "Data Filtering" monitor I can see few files being blocked (EXE files for example), but I can't see the full URL of that file (the "File URL" column is all blank). The goal is to understand if the root URL can be white-listed. Cou...

AMoretti by L1 Bithead
  • 4778 Views
  • 4 replies
  • 0 Likes

Resolved! "Error: Failed to connect to User-ID-Agent at x port 5007

we got this email aler from firewall that user id agent failed to connect to x on port 5007when i log on firewall i see user id agent is connected. We are running version 8.0.9 on PA 5050. how can i know the reason for disconnection on the firewall?

MP18 by Cyber Elite
  • 9051 Views
  • 4 replies
  • 0 Likes

Unable to create same tag with different subinterface

all wan subnets they have created single vlan id 200 and for all there is a single gateway.Project 1: wan1: 172.30.20.2/24Project 2: wan2 : 172.30.20.3/24...Project 7 : wan3 : 172.30.20.7/24For all project gateway is 172.30.20.1/24 because all subnets assigned to same vlan id.All projects have assigned in different VR & Vsys. Checkpoint - L...

Resolved! routing between 2 virtual router

hello,i have a setup like the image below.my goal is to allow internet throught interfaces 3 and 4 (i have a virtual router with these 2 interfaces, vr_l3) : this is workingi have an IPSEC tunnel on interface 1 (with another virtual router, vr1) to route 172.22.0.0/20 : this is workingi have a dhcp server on interface 3 if i put a route directly...

xxx.jpg

Compare the addressed issues list between 9.0.6 and 8.1.13

Hi, 9.0.6 was released on 1/27/2020 and 8.1.13 was released on 2/6/2020. While comparing addressed issues between the release notes, Many issued ids resolved in 8.1.13 are not listed in 9.0.6. Just a few examples, PAN-134678(PA-5200 Series firewalls only) Fixed an issue where the Quad Small Form-factor Pluggable (QSFP) 28 ports 21 and 22 did...

  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
Labels