This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Global Protect Doesn't connect to Portal. It connects to my WIFI instead

I have installed GlobalProtect,Version 5.0.3-29. All my colleagues are able to connect. Here are the steps:1. Install Cert in CertStore.2. Download GlobalProtect agent for 64 bit.3. Now when trying to connect to Portal. It doesn't throw any error but connects directly to my wifi. It displays "Not Connected. You are connected to ''Wifi Name ". Ha...

intermittent dataplane CPU spike

@BPry I am seeing the dataplane cpu spike to over 90% for about 5 minutes and then drop to normal. It comes intermittently with not regularity to when it occurs. I have been doing the show running resource-monitor, show system statistics, and showing the 20 top applications and I can not find it. Any suggestions would be helpful

jdprovine by • L4 Transporter
  • 5794 Views
  • 3 replies
  • 0 Likes

Zero Day vulnerability in Google Chrome (CVE-2019-13720, CVE-2019-13721 )

Hi Team, Anyone know which Content Update (released or upcoming) might contain a mitigation for CVE-2019-13720, CVE-2019-13721 Refer the below link for Vulnerability details:https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-google-chrome-could-allow-for-arbitrary-code-execution_2019-118/ Best Regards,Sahul Hameed

SahulH by • L3 Networker
  • 9818 Views
  • 8 replies
  • 0 Likes

Resolved! Global Protect Feature - Enter client's notes per connection

Hello,We have Global Protect VPN profile that provide access to our environments and I need to let the clients to justify every connection to the VPN.I'd like to know if it is a way to open a text box for every VPN connection to let the client enter his notes and see the connections notes in the PA monitoring section. Appreciate your help... Th...

Content and Antivirus updates failing

Anybody else encountering this issue in the last days?Content and antivirus updates are failing with "Failed to download due to generic communication error. Please try again later."The internet access itself is OK. The issue seems to be on the Palo Alto Networks side.

Anon1 by • L4 Transporter
  • 9101 Views
  • 6 replies
  • 0 Likes

Resolved! HA between two different Palo Alto Networks devices

Hello,Can I set up a HA between PA-500 and PA-220?I searched a response to my question in the PA documentations but I found that it is required to have two same model of Palo Alto Networks:https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClrsCACCan you please confirm this answer to my question ?Thank you in advance.Best ...

ra7oub4 by • L2 Linker
  • 3965 Views
  • 1 replies
  • 0 Likes

Traffic Shaping requirement

Our customer wants to shape the traffic to 40 mbps user. I can see they have a QOS rule for all Traffic, class 4 is in use, does it mean the current shaping is 400 mbps? Is it per client or overall? How do we achieve customer request (traffic shaping per user)?

Class.png

Resolved! Having trouble passing traffic from one VPN through to another

Hi all, Here's what I'm trying to do - I have a PA firewall with two VPNs - let's call them A and B. I'm trying to work out how to get traffic from site A to route through to site B, but it's eluding me - the site B tunnel doesn't come up. I have tunnel.198 to Site A with a route passing 192.168.24.0/21 traffic to that tunnel, and tunnel.300 wit...

CoreHR by • L1 Bithead
  • 3476 Views
  • 2 replies
  • 0 Likes

Globalprotect Block sessions if the certificate was not issued to the authenticating device

Hello,My organization is testing out GlobalProtect for Linux and we've quickly realized that the certificates we deploy through SCEP (MS NDES, Certmonger) can be utilized on other systems than whom they were intended for. This opens up for users with root access (dev's) to set up a non company owned/managed devices with GlobalProtect and this pr...

Tony-Le by • L0 Member
  • 5811 Views
  • 2 replies
  • 0 Likes

Multiple URL Global Protect Multiple FQDN

We would like to use multiple URL's to access our Palo with Multiple LDAP authentication. portal.company1.com LDAP1 portal.company2.comLDAP2 portal.company3.comLDAP3 We could also do like C1.company.comLDAP1C2company.comLDAP2C3company.comLDAP3 Can anybody guide me to a solution so far support has not been super helpfull. Another is portal.comp...

GlobalProtect - Windows 10 - Client Won't display

I have a fresh install of Windows 10. When I right click on the GlobalProtect icon in the tray no menu ever shows up. I see the GlobalProtect icon in the taskbar but any click on it will make icon dissappear. Any ideas or workarounds? I have re-installed the client at least 5 times now and restarted my PC several times. Same behavior every t...

egv12wQ

Can't receive Multicast traffic from un-trust zone to trust zone

Dears,We should receive a multicast traffic from a third party router that are connected to our un-trust zone.This multicast should be received on a server that are connected to LAN environment (trust zone)Firewall is PA-820 and OS is 9.0.4 We tried to allow multicast and PIM/IGMP on both interfaces but no hope. Multicast is not passing the fire...

Ammar by • L2 Linker
  • 3457 Views
  • 3 replies
  • 0 Likes

GlobalPotect initial login

I have deployed the GlobalProtect Always-On VPN via the MSI.exe, where the external gateway is specified. The GP client installs fine on the Windows endpoints. The remote user logs into the Win 10 endpoint with their Windows domain credentials as normal. As they have never connected via the GP client before, they are prompted to enter their Wind...

rchung54 by • L2 Linker
  • 3547 Views
  • 3 replies
  • 0 Likes
  • 24460 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks