This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Global Protect User Groups

I want to user map configuration to AD user group for Global Protect clientless VPN. This works quite will if authentication is LDAP.Have you any idea how can I get it to work with Radius authentication? Presuming that the user has the same name as the LDAP user, would they be matched to the relevant AD group?

BatD by • L4 Transporter
  • 3719 Views
  • 3 replies
  • 0 Likes

Difference between making a report with "Run Now" and making it with the "Scheduled" option.

Hello, I have created a custom report with the following settings in Panorama: set shared reports "Threat Summary-Diario" type panorama-thsum sortby countset shared reports "Threat Summary-Diario" type panorama-thsum group-by srclocset shared reports "Threat Summary-Diario" type panorama-thsum aggregate-by [ category-of-threatid threatid subtype...

bprietoc by • L1 Bithead
  • 4400 Views
  • 3 replies
  • 0 Likes

Resolved! scp export log traffic to a server not using port 22

Hello, I'm trying to send an export of traffic log to a server that use port 40111 instead port 22.I'm using this command in Panorama: scp export log traffic to [email protected]:40111 But receive a timeout indicating that host 1.1.1.1 hasn't available port 22.In GUI you can configure the destination port when use SCP, why not in CLI? Thanks in advance.

bprietoc by • L1 Bithead
  • 4329 Views
  • 2 replies
  • 0 Likes

Resolved! Rule usage report in PanOS 8?

Is it possible to create (scheduled) rule usage reports in PanOS 8, ideally from Panorama on a per device group basis? I see the rule usage data present, seems silly there wouldn't be a capability to query against it.Rules (not) used withing last X days?

BoDollis by • L1 Bithead
  • 5035 Views
  • 3 replies
  • 0 Likes

Debugging packet flow.

Hi there, We have just moved from a Juniper SSG-550 with around 700 policies to a PaloAlto 3050. Naturally this has thrown up a few issues! Can anyone explain how to do the equivalent of a Juniper “debug flow basic” on the PaloAlto? On the Juniper, this would all you to follow the journey of a packet from ingress to egress, through the ent...

Blocking vs. logging throughput

If I have a security policy applied to all my zones which includes profiles for everything (AV, spyware, vulnerability protection, etc.) but the actions are all just logging or alerting and not blocking, would that affect my throughput? I was wondering if I could run all of these services and still get the box's max throughput if I'm not blocki...

Threat / AV signatures after OS EOL.

Will AV / Threat Signatures still up date on 8.0 after EOL? I only found out it was going EOL when I logged into another of our clusters with 8.1 which told me on the MOTD.. The MOTD on the 8.0 has no such message. I have had look through the "Palo Alto Networks Content Update" emails and can't find any warning. Even on the 8.0.20 release ther...

Resolved! Replacing a Palo

Hello -We had one of our Palos die on us, we have the replacement and I have read this document: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHFCA0 But, I'm hoping someone on here can give me some real world experience tips and tricks or got-ya's. Basically we have a pair Palo1 and Palo2. Palo1 is the one that die...

Shawverr by • L3 Networker
  • 4367 Views
  • 2 replies
  • 0 Likes

Resolved! PA-500 VPN with Amazon VPC

Hello,have someone a howto about connecting a PA-500 with the Amazon VPC Service?It would be nice to take a look on it best regardsDietmar Otto

PA session end reason is decrypt error -

In PA i saw this behavior for session end reason is decrypt error and traffic is working fine.I check with users where session end reason is decrypt error they told me they have no issues.we have ssl decryption enabled and PA is running 8.1.9IS this by design or normal behavior?

MP18 by • Cyber Elite
  • 20364 Views
  • 2 replies
  • 0 Likes

Resolved! PA-850 & Radius PEAP

We had purchased a pair of 850s to replace a pair of 3020s. Over the weekend I had put the 850s into place and we immediately saw problems with clients authenticating to our radius server behind the 850. We're working with PA support but they seem fairly insistent that there is no problem with the 850s. A bit of background: We have cell phone...

VPN S2S and Description ssl in Wires mode

Hello, I have a couple of doubts and I would like you to help me about it. 1.- Is it possible to perform an Ipsec VPN when the firewall is in V-Wires mode? Only having an IP in the administration interface? 2.- Is it possible to perform SSL decryption when the firewall is in V-Wires mode? If so, what parameters should the digital certificate ...

Lcarocas by • L0 Member
  • 3246 Views
  • 2 replies
  • 0 Likes

Resolved! DSRI for VPN Tunnel

I can't seem to find a clear answer to this, and there may not be one. I have a VPN tunnel between 2 sites, both on PA-820's. Would "disable server response inspection" on the VPN policy on both sides benefit from this? What are the potential downsides if I did do this?

Updates palo alto network website and ssl decryption

I am going to implement ssl decryption for some subnetswhere we have management subnet of Palo Alto networks. Need to know if PA website updates.paloaltonetworks.com works when SSL decryption is enabled?Do I need to check - verify server identity for ssl decryption to take effect? RegardsMike

MP18 by • Cyber Elite
  • 4007 Views
  • 4 replies
  • 0 Likes
  • 24431 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks