This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

BI- DIRECTINAL NAT IN PALO ALTO

BI- DIRECTINAL NAT IN PALO ALTO Go to Policies > NAT > AddCreate a NAT Rule:Name the rule as per your convivence.Select the source zone as LANDestination zone as WANInterface as the WAN (exit interface)Service as the preferred port.Source ip address as the internal LAN IP.Destination ip address as any.Now in translated packet, Select Stati...

What apps and services are used for Meraki Cloud?

I can't seem to get the policy right for my Meraki APs to check in with the meraki cloud. I have allowed DNS, Ping, Meraki-cloud-controller using any port and allowed to *.meraki.com and *.opendns.com. Still see stuff hit my deny. Anyone know the correct combo for a policy?

Resolved! PA 5220 Packet Descriptor Max value

When I run show running resource monitor. I see packet descriptor max value most of time above 80 like in 90's. sometimes 100 100. Packet descriptor average value is still under 80.We have ssl decryption enabled on the PA.Also we have decrypt mirror configured. What can be reason that packet descriptor is going over 90 so often? Mike

MP18 by • Cyber Elite
  • 8886 Views
  • 8 replies
  • 0 Likes

PA3020 fans always running at 100% speed?

First thing I noticed when I plugged this in was that it's very loud. Normally a device spins down the fans when it's at a cool temperature (which is pretty much all servers and appliances from the last 10 years).So is there any way to change the fan speed?If not, can I request this feature?

Maxstr by • L3 Networker
  • 10674 Views
  • 9 replies
  • 0 Likes

Disable Application Packet capture

I am having firewall managed using Panorama . I am planning to disable application packet capture on specific device . Can i do using panorama or need to do from individual firewall. Thanks

deepak12 by • L3 Networker
  • 2293 Views
  • 1 replies
  • 0 Likes

Tackling Google Stadia

Greetings all, As I'm sure most are aware Google launched Stadia this week. Has anyone had any luck with blocking access to this service without hindering the use of other Google resources? I know this will be a temp fix due to eventually it will be present in apps and threats but any help/advice would be appreciated.

Resolved! White-list FTP Application

I did created a policy to block "File-sharing" applications with application-filter method.This policy is very successful, but we need to white-list the FTP application. Please advise how to fulfill the blocking and at the same time allow FTP. Thanks.

Unable to delete Certificate

Hi I need to delete a certificate from a PA-3050. The certificate is currently EXPIRED. When I try to delete it it says this message 1- Failed to delete Certificate - MYCOMPANYWildcard 2014-2017-FOR_DELETION. ° MYCOMPANY Wildcard 2014-2017-FOR_DELETION cannot be deleted because of references from: ° ssl-tls-service-profile -> MYCOMPA...

SOC_CSG by • L4 Transporter
  • 29121 Views
  • 7 replies
  • 0 Likes

Palo Alto HA in an Azure environment

We have utilised Marketplace in Azure to setup 2 x PAs with the intention of turning on HA.We can not locate configuration information for an Active/Active setup in an Azure environment (seemingly we can locate only Active/Passive setup information). Can someone guide me through active/active setup in azure

Global protect on MAC, with proxy settings

In our company, we do not allow split tunneling and access to Internet(while on VPN) happens via only proxy. We are using on-demand mode. Once MAC users connect to GP,proxy settings apply. Only browser which works in this setup is Mozilla Firefox. Is there a fix for this. ? Has any one run into this issue. This setup worked fine when we were on...

SuryaR by • L3 Networker
  • 8904 Views
  • 5 replies
  • 1 Likes

Resolved! weird file in device with TRAPS

Hello,We have devices with TRAPS and we has found files with strange names as !!!!!!!!* and zzzzz*.I we try to modify or execute we get anti-ransomware alert.this files are normal? could be a bug?

Capture.JPG
Marivi by • L2 Linker
  • 12423 Views
  • 7 replies
  • 0 Likes

PA-220 DHCP with reservations

I have this weird issue where if my wireless clients lose connectivity to my meraki AP and then have to rejoin after the AP reboots, the DHCP server on the PA-220 stops handing out DNS servers that are inherited from the untrust port. I have all clients on my network as DHCP reservations. After they can't get DNS servers I have to reload the PA-...

Suspicious DNS Domain addition

Hello, is there a way to report suspicious DNS domains to Palo Alto for inclusion on the Palo Alto suspicious DNS query list? we have a domain which various threat intelligence sources report as suspect/risky but it does not appear in the Palo Alto list. i know we could set up a custom list but is there a path we an use to report into Palo Alt...

  • 24447 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks