General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Panorama Pre and post rules

Pre rules post rules in panorama of palo alto firewall 1..if post rules and pre rules have already configured in panorama and then we add another palo alto 2 in panorama which has post and pre rules as well which one it will select ?|Does pre rules of palo alto 1 changes and inherit pre rules of palo alto 2 in panorama ....and does post rules o...

Activity Locked on Beacon

Hello, I am having an error when trying to access the PSE foundation course on Beacon as in the screenshot attached. It is saying that "Activity Locked". What is the cause for this error and how can I fix this?    

temp_1740709165644.png
temp_1740709171082.png
temp_1740709176012.png

Resolved! PA-VM web interface login process is unbearably slow.

Hello, At some point, I noticed that the web login process on my PA-VM firewall started taking more than 90 seconds. Restarting the process using the debug software restart process management-server command didn’t help much. I then checked the system resources and applied Shift + M. The output is shown below, but it seems that RAM usage is not v...

ADovgals_0-1740741170029.png

PaloAlto firewall HA upgrade

Hi I am new to Palo Alto firewalls. I need to upgrade the firmware on PA-3220 firewalls in A-P HA . Firewalls doesn't have management ports connected to network and they are remote. It looks like i need management port access of individual firewall to upgrade the firmware. Is it possible to upgrade without management port access? if so, how do y...

thushy by L0 Member
  • 1173 Views
  • 3 replies
  • 0 Likes

existing session behavior when routing table changes

Does anybody know if existing sessions can be updated when there is a routing table change, or if there is a way to clear sessions? I'm hoping for something analagous to the Session Rematch feature when policies change. My problem is that I have an existing session that becomes hung when the routing table changes. The routing table updates w...

Resolved! Palo alto weekly update

Hello, We are experiencing an issue with our firewall, as it is no longer downloading its weekly updates as expected. I attempted to manually download and install the update, but encountered a warning message (please find it attached). To clarify, there have been no changes to the configuration on our end. Could you kindly assist us with resolvi...

Need to check comptibility

Hello Team, We have PA-5420 firewall having 10Gig port. but downlink on cisco switch we have 25Gig port. if that is the situation then it will work or not.

jhussain1_0-1740586800075.png

When setting up HA from a stand-alone...how should I configure LAN ports on the switch? What state are links on the passive node?

I have a standalone PA-440 that I am in the process of moving to HA. I have all the wiring done with ISP1 and ISP2 broken out and going to the same ports on each of the 440s. That part all seems fine. I have all the licenses in place and I have green dots and sync across everything in the HA widget on the dashboard. I only have a single switch...

Prove the firewall innocent?

Hello, We have communication from load balancer to 2 servers called S1 and S2. Both S1 and S2 have same Windows Server version and have exact same patch level. Both serve a web-service hosted on their IIS. On Palo firewall, we have App-ID based rule allowing web-browsing as application. Till 2 days ago, both of them were working perfectly. Yeste...

Device and customer codes do not match a Support Account.

Hi, I recently acquired a used Palo Alto firewall and I'm encountering an issue during the registration process. The error message states: 'Device and customer codes do not match a Support Account. Please contact a Super User to send you a registration link for the appropriate Support Account.' However, I don't have access to a Super User sinc...

Eightin by L0 Member
  • 1123 Views
  • 1 replies
  • 0 Likes

Resolved! Historical Bandwith/Interface Mbps Usage

Hello I am struggling to get some very basic data from a Palo Alto Firewall or Panorama appliance. All answers seem to point to third party solutions. I would like to get historical bandwidth usage. Pretty much what QoS Statics offers but instead of realtime, I want to be able go back days/weeks. All I am getting is aggregated data by Applic...

palodm by L0 Member
  • 4794 Views
  • 2 replies
  • 0 Likes

Resolved! Device Certificate - Where to find OTP?

Under Device -> Setup -> Management -> Device Certificate, I am unable to fetch the device certificate. A message box says get your one-time-password from the Customer Support Portal and enter it below. I tried my 2-factor OTP that I use to login to the support portal, but that doesn't work. How do I generate the OTP to get the device...

File Bolck in AI Websites.

Dear Experts, Has anyone successfully blocked file uploads on AI websites? We have attempted to restrict file uploads, but it hasn’t worked as expected. Please note that SSL decryption is enabled, but we are still facing issues. If anyone has implemented this successfully, please let us know.

CyberEye by L3 Networker
  • 1301 Views
  • 2 replies
  • 0 Likes
  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
Labels