This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Is there a secure way to generate XML API tokens?

I've been trawling Google for a while now trying to find an alternate way to generate the XML API token. However there only seems to be one method to do so.Maybe I'm a little paranoid, but it seems really insecure to send your admin username and password in plaintext to the firewall to generate an API token. In a world where network security is ...

How to add feed for github IPs?

Little confused on how I actually do this. I want a list generated on minemeld from the following page: https://api.github.com/meta How do I go about making it so that list is referenced via a policy to allow github APP to that list of IPs? I am already using minemeld for o365 but that was canned and this isn't. Appreciate any help anyone ca...

drewdown by • L4 Transporter
  • 10889 Views
  • 6 replies
  • 1 Likes

Overloading 5220 with 9.0.x

Hi I update my firmware from 8.1.10 to 9.0.5 now I can bring my 5220 to its knees with my mailist runSo email consist of pdf attachment - approxy 3M. but about 4K emails all around the same time This wasn't a problem before on the 8.1.10 .. but on 9.0.5 cpu hits 100% and my latency through the box goes from <1ms to 2-3s+ which makes things c...

Alex_Samad by • L4 Transporter
  • 14706 Views
  • 22 replies
  • 0 Likes

Resolved! PA-500 Noise Issue

Hello,We have PA-500 Firewall and it is making a lot of Noise but the Indicator is showing Green.Can anyone suggest what could be the issue and how can it be resolved.Also, i am not able to find any Pala Alto Support here in Dubai where I can get the same checked.Thanks a lot in advance.

Resolved! Replacing fan tray in PA-500

Hi all,Apologies, I am new to the PA forum, first time poster here. I have a job coming up to replace a fan tray in a PA-500. I tried to find some documentation since I have not carried out this type of work before but I can't see to find any. Are fans/fan trays in the PA-500 hot swap-able? Is there a document on how to replace the fan trays and...

Resolved! PPTP/L2TP Tunnel on PA

Please let me know if its possible to configure either PPTP or L2TP tunnel on Palo Alto. Please also share the steps to do so.

Indentify internal users using thinclient machines.

Hello , Can anyone help to identify users on thinclinet machines(linux). These machines have same ip and mac-address and are recieved by a server. We use machines from n-computing. I was thinking to use captive portal but i suppose that it wont work in our case. Please let me know a way out on how this can be achieved.

GlobalProtect usage PDF Report

Hi, is it possible to get a daily/weekly PDF Report over succeeded and failed GlobalProtect authentifications? I only found the CSV Export inside the system log with an active filter (like (eventid eq globalprotectportal-auth-succ)). I'm looking for an automatic approach, with optionally a better layout. System Log Forwarding only works for ever...

mrkskhn by • L1 Bithead
  • 6383 Views
  • 4 replies
  • 0 Likes

Inter Vsys Routing Recommendations from Palo Alto Networks

Hi Team, I hope ye are well. Can we get a KB article on Palo Alto Networks recommendation regarding inter-vsys routing ? Given that inter-vsys routed sessions never get off loaded and can have a cost against the dp, is using basic cabling best option between interfaces or letting up/downstream switch handle the routing between vsys ? There has b...

Issue upgrading 8.1.x VW interfaces

Hi, I wanted to comment an upgrade issue that its making me crazy. We have a cluster A/P in 8.0.8, these devices are in diferents datacenter. We have tried to upgrade this cluster 2 times with no success. We upgrade the passive unit to 8.1.10 and everything is ok, but when we do the failover in order to put the upgrade node as active, all the Vi...

BigPalo by • L4 Transporter
  • 2328 Views
  • 1 replies
  • 0 Likes

Can't install GlobalProtect on Win 10 Pro

Hi All,I am trying to install GlobalProtect on my Win 10 Pro but failed and got the message about no mfc120u,dll. Then I googled it and saw people suggest to install Microsoft Visual C++ 2013 Service Pack 1 Redistributable Package to solve this problem. But after I downloaded this Microsoft Visual, my computer indicated this app can't run on my ...

Bbisland by • L0 Member
  • 3832 Views
  • 1 replies
  • 0 Likes

DHCP Relay with Source Nat blocked

Hi, a customer has two PA VMs in the Azure cloud with internal loadbalancers configured. Unfortunately the DHCP server is also running there. In order to perform symmetric return a source nat is needed on the firewall. However this breaks the DHCP flow between DHCP relay and windows DHCP server. The DHCP server always replies to the relay agent ...

DLP and PA-820

howdy all,Is the PA-820 firewall capable of DLP? We have migrated from the 500 to the 800 to the 820.Thank you

PA200-1 by • L1 Bithead
  • 2615 Views
  • 1 replies
  • 0 Likes

Error: 'cannot start tunnel'

Hi allmy Name is Mario from Germany, i new here, sorry for my english, i hope you can understand me.i have a Problem with globalprotect . Version: 5.1.0-37Download / Installation / Setup: ok Connection error: 'cannot start tunnel' i use win10 64bitNorton IS is running - Firewall GpVpnApp= accept I have already uninstalled and reinstalled and F...

MBOTHGE by • L1 Bithead
  • 6785 Views
  • 6 replies
  • 0 Likes
  • 24464 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks