This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Routing driving me crazy

Hi folks, here's a weird issue!We have one public IP lets say 1.2.3.4.Our PA VM 300, can ping to any public IP address other than 1.2.3.4.For all other public IP addresses, it sends traffic via default route out of external interface. But for 1.2.3.4, it sends the traffic to our management gateway. Following to be noted:1. 1.2.3.4 is our other P...

CVE and Threat Signature

In looking at the threats in the Vulnerability Protection profile only a relatively small number have CVEs associated with them. Is there a way to get a list of those that do without just scrolling through the pages of threats in the GUI? Also, is there somewhere that the whole list of vulnerabilities is posted from PA? I suspect not as this is ...

Throughput calculation

Hello , Can someone know how to calculate manually the FW Throughput ?it's for a PA 5060 with multiple Vsys and 1 etherchannel to the external network and another one for internal servers. Command 'show system statistics session' display a low value in comparison of snmp BW value graphshow system statistics sessions > Throughput :133965 Kbps...

Resolved! File Blocking Continue Page in a TLS connection

Hello everyone, I have a PA-VM in version 9.0 .1 , I have setup a File-blocking profile and attached it to my allow-all security policy. The File-Blocking profile has the action of "Continue" for ".exe" file type. In the other hand, I configured a decryption policy. My problem is that when I try to download an .exe file via HTTP I get the "Conti...

enabling x-auth support on an existing globalprotect gateway

i have 2 gateways configured on my firewall. One for corporate users which has certificate authentication, and another gateway which uses domain credentials for accessing on non-domain machines. If i enable x-auth support on one of these gateways, will that have any negative effects on windows users? basically i wish to use the native vpn client...

welly_59 by • L0 Member
  • 3670 Views
  • 1 replies
  • 0 Likes

GlobalProtect 5.0.2 install/update issues

Had an update prompt on an existing/working version of GlobalProtect that failed. Could not start or reconfigure installation. Removed the old version manually and tried to install 5.0.2, when I received a message "There is a problem... A program required for this install to complete could not be run." I tried updating the C++ framework I saw el...

Global Protect Application

Hi all, I am facing a problem with the global protect mobile app, when i put the username and password for a predefiend user the user login and logout suddenlly at the same time. on the firewall monitor --- system it is appeared that the user successfully login and successfully logout at the same time!!! What is the problem here where could i se...

Capture.PNG

vwire

Hi,How vwire can stop mac flap and broadcast storms Thanks

simsim by • L4 Transporter
  • 3121 Views
  • 2 replies
  • 0 Likes

Resolved! How to configure 1/11 to be dhcp and 1/12 to connect to management PanOS 8.1.10

We have a setup with a network connection into a PA5020 firewall that has a single out interface configured to a Server. Due to configuration (No Switch) we need to be able to access the Management port via one of the unused ethernet interfaces with a laptop. We can't set the ip of the laptop but can have it pull a DHCP address. The server does...

rwolsen by • L1 Bithead
  • 4706 Views
  • 2 replies
  • 0 Likes

Resolved! AlienVault miner configuration issues

The default user_AlienVault is working without errors but attempting to create nodes with user_SomethingElse for different feeding choices only produced errors. Example:basepoller._poll ERROR: Exception in polling loop for AlientVaultNonDefault: AlientVaultNonDefault - collection SomethingElse not foundTraceback (most recent call last): File "/...

Vorskla by • L1 Bithead
  • 2923 Views
  • 1 replies
  • 0 Likes

ACE Exam - PAN-OS 4.0

This test is killing me! I've tried twice and failed both times. I've gone through the Firewall Configuration Essentials 101 PowerPoint half a dozen times, in detail, as well as the Administrator's guide, a dozen technical documents, etc., before each attempt and I have gotten a 69% both times. I think several of the questions are horrible and ...

Security policy rule to whitelist social media category by AD security group - multi-domain

Trying to configure this rule to whitelist users in an AD security group that's in another domain in our forest. It works with our domain fine, but when I try to create an LDAP server profile for another domain, a group mapping with a group include list where I can drill down and see the AD security group that was created, after adding to the ru...

Resolved! Certificate for GP Gateway for IOS 13.x

Dear all,was anyone able to generate a certificate satisfying the new requirements from Apple for IOS 13?https://support.apple.com/en-us/HT210176 I have no problems generating the correct Subject Alternative Name extension, but no idea so far how to satisfy:TLS server certificates must contain an ExtendedKeyUsage (EKU) extension containing the i...

  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks