This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

CSR Certificate Issue

Hello Team, Three year before ,One of my customer is generated the certificate from linux machine and sent it to comodo for third party sign.Now they got new palo alto firewall and he is trying to install that certificate on palo alto but while installing certificate we are facing "Mismatched Public and Private keys" I have one more doubt that, ...

Interrogate External Server for UserID

Hi,We have a use case where, upon detection of a session with an unknown userID, we'd like the Palo firewall to interrogate an external service via REST API for the UserID/IP address mapping. I appreciate the normal way is to prepopulate the Palo or UserID Agent servers with data from external sources, but this is not possible in this case.Any ...

Resolved! How to enable all disabled application in fast way

Hello Team, Please let me know how we can enable all disabled application in faster way.During dynamic updates of Application and Threats customer clicked on 'Disable new apps in content update,' so there are total 700 application disabled and i found only two way to enable on both way i need to select disabled app manually one by one.

dmodi by • L2 Linker
  • 6396 Views
  • 2 replies
  • 0 Likes

How to change DNS IP for "set deviceconfig setting management initcfg dns-primary x.x.x.x"

Palo Alto Firewall has following configuration. set deviceconfig setting management initcfg dns-primary x.x.x.xset deviceconfig setting management initcfg dns-secondary y.y.y.y I was trying to change DNS ip address to another ones, but I couldn't.It was giving me "Invalid syntax" error message."initcfg" option was not there when I check command ...

Hae-Gab by • L0 Member
  • 8029 Views
  • 2 replies
  • 0 Likes

Resolved! GloablProtect

Hello Community, I am new to palo alto. we have deployed some firewalls in our company. I am trying to configure globlalprotect on the branch offices to add more gateways. I have an extra internet connection at one location and wanted to know if its possible to configure global protect on one of the interfaces. the firewall is currently behind a...

Globalprotect.PNG

Resolved! Application vs Service? Specific to traffic being classified as APPs using the same ports

I use both but running into an issue with Lab specific traffic where I will allow a list of applications with service set to ANY but the PAN classifies some 443 traffic as (for example) 'windows push notification' or 'soap' but I am not allowing either of those APPs so it drops it. I am allowing web-browsing and windows push/soap both use tcp/44...

drewdown by • L4 Transporter
  • 28758 Views
  • 11 replies
  • 0 Likes

Blocking Google Images

Howdy everyone, We have a strict internet usage vlan where users can only hit an Approved List of URLs that we manage through Panorama. The issue is that some of these fights reference Google as part of the CDNs so we've had to allow them in to the Approved URL filter. This has been working for a long time, but a few users learned that they can...

Email Alert Subject Line.

Hi team, Is it possible to customise the Email alert subject line ..?? For Example : Default - Sub: "The VPN XYZ tunnel is down"Customised - Sub: "The VPN XYZ tunnel is down, Need immediate attention".

Resolved! Palo Alto keep client IP

Hi, Is possible to keep in Palo Alto the client IP although PA is doing a source NAT to reach internet?. A service in the cloud needs to know the client IP. Something like XFF.

BigPalo by • L4 Transporter
  • 3036 Views
  • 1 replies
  • 0 Likes

Resolved! Traffic log shows decrypted for blocked traffic

We have not enabled ssl decryption for specific subnets.When I see the traffic logs I see ssl decrypted is checked and traffic is denied. I verify that I see decrypted flag for all traffic that is blocked in url category. Need to know reason for this? RegardsMike

MP18 by • Cyber Elite
  • 4090 Views
  • 3 replies
  • 0 Likes

Resolved! PanOS version number

Am I correct that the naming scheme is considered Major Version . Feature Release . Maintenance Release - hotfix?8.1.6-h3

BoDollis by • L1 Bithead
  • 6939 Views
  • 2 replies
  • 0 Likes

Packet Descriptors spike

Hi All,I've been collecting and plotting CPU, Session, Packets Descriptors, Packets Per Second, as well as some other metrics. Once in a while I see a spike on the Packet Descriptor graph.According to KB article How to Interpret: show running resource-monitor :The cores specified in the CPU usage output have dedicated functionalities:Core 0: use...

  • 24479 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks