General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Iphone globalprotect app 5.1

Is anyone else having issues with the new version? Getting authentication errors. Was working fine before the update. I don't believe anything else has changed. Have a ticket in but was curious if anyone is running 5.1 successfully on an iphone.

Palo Alto Threat Logs

Hello, I've been getting multiple code execute with a content type "Suspicious File Downloading (54469)". I'm not really sure if this is just normal browsing or a directory scan, I can't find any documentations about this content type. May I know what it does or what happens with the traffic?

Resolved! How to output and input the Palo alto security policy to other one PA device?

we have a lot of the same security policy want to transfer to branch office,any method I can output and input the Palo alto security policy to other one PA device? just like cisco swith CLI, maybe "show security policy....." in old one, and "set security policy..." in new one, that will be convenience for setup new one.

Counter for drop packets at the Ingress/interface stage

Is there any specific counter to tell if traffic is being dropped during high-dataplane utilization ~100%.The show counter interface <interface> specifies dropped packets & packets dropped due to flow state checks. but will there be any slighest chance that we are dropping traffic because the chip buffers are under severe load.

Sanssj by L2 Linker
  • 6381 Views
  • 2 replies
  • 0 Likes

Resolved! URL for Bulletproof ISP's EDL ?

I was at the Boston Fuel event, and one of the sessions the presenter said they could give us a URL for the new Bulletproof EDL listing (built-into PAN-OS 9.x). I'm not brave enough the deploy 9.x in Prod, so I was hoping maybe someone had the URL so I can create my own rule blocking these hosting providers that seem to harbor lots of malicious...

Palo alto FW for home/lab

Hello, I would like to ask you regarding PA firewall for Home/Lab. I worked like Network engineer, mostly with Cisco devices in ISP (MPLS, BGP, IPSEC, QinQ), and now I desided to learn new things. Which things I can learn, study with PA200 PAN OS 8.0 without license ? I am trying to find any cheeper devices with licence but it is impossible for...

ZEENMC by L1 Bithead
  • 52176 Views
  • 11 replies
  • 0 Likes

Minemeld Ageout Policys and Withdraw

Hello, Im having several issues and questions about what the best practices would be for surronding ageout policys. Is it better to add an ageout policy to the Miners, Aggregators, or Outputs?If I use the following Ageout policy, if a feed sends an IP right after the age-out occurs, will the first_seen time start over? age_out: default: firs...

DSHDAlex by L0 Member
  • 5543 Views
  • 3 replies
  • 1 Likes

VmWare ESX Firewall License

Hi community, i have a problem with licensing firewall which is on VmWare. When i tried to "deactivate vm" under licensing tab(on firewall), firewall has no longer license but on the website support.paloaltonetworks.com there is still active authcode. And can not add manually a new authcode on firewall. What causes this problem? Can you help me ...

How to store output

Hello Team, I have one txt file in my window machine in which there are 1000 urls example.test.abc.comtest.ftp1.com so if i type this cmd in putty "test.url test.abc.com" i got some output. Please let me know is there any way to save the output of all these 1000 urls like in linux we can use > root/Desktop/test.txt to save the output

dmodi by L2 Linker
  • 6269 Views
  • 7 replies
  • 0 Likes

Cannot connect to GlobalProtect

Hi, Just need bit of a direction on what to check for this issue. Two users can't connect to the globalprotect vpn. One user: Windows 8.1 - can't connect (shows connecting forever) and another one: Windows 10, seems to connect and disconnect straight away. Logs from PANGP shows: 362): InitConnection ...(T8796) 09/06/17 05:49:46:934 Error( 366): ...

Farzana by L4 Transporter
  • 18578 Views
  • 11 replies
  • 0 Likes

proxy_arp_pvlan_feature request

Dear Palo Alto support teamAs I have post my question in the community, I come to conclusion that the Palo Alto firewall does not support the feature explained in the post--https://live.paloaltonetworks.com/t5/General-Topics/proxy-arp-pvlan/m-p/302528#M78834.The design case is used the the private vlan scenario where the upstream router/firewall...

seek_2 by L1 Bithead
  • 3563 Views
  • 1 replies
  • 1 Likes

Resolved! PAN-OS 9 Browser Issues

Hi community, after upgrading Panorama M-200 to PAN-OS 9.0.5 (due to bug fixes) we only can access panorama via Firefox.Opera, Chrome and IE see the login page, the login is successful, but after redirecting to the dashboard, the url is stuck with <ip>/? and the load-page is ready. Clearing the browser caches, navigating to <ip>/debu...

Chacko42 by L4 Transporter
  • 6724 Views
  • 2 replies
  • 0 Likes

Resolved! Engine error after reboot

My Minemeld system is failing to start, giving an engine error. The last it,e in the log is 2017-11-18T17:38:06 (2843)launcher._run_chassis ERROR: Exception in chassis main procedureTraceback (most recent call last): File "/opt/minemeld/engine/0.9.44/local/lib/python2.7/site-packages/minemeld/run/launcher.py", line 53, in _run_chassis c.config...

deanm by L2 Linker
  • 6915 Views
  • 3 replies
  • 0 Likes

Recommended User-ID settings

I need some help understanding the recommended settings for Pan-OS agentless User-ID. First, here are my current enabled settings.Server Monitor tab: I have "Enable Security Log" checked. Server log monitor frequency is 20, server session read frequency is 10 Client Probing; enabled and set to 20 min Cache: User ID timeout is enabled and set ...

ce1028 by L4 Transporter
  • 13249 Views
  • 5 replies
  • 0 Likes
  • 24412 Posts
  • 125 Subscriptions
Top Solution Authors
Labels