General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Packet buffer protection - PA5220 vs PA5410

I've recently upgraded my firewall from a PA-5220 pair to a PA-5410 pair. The firewalls were on the same PanOS version (10.2.4-h2) and with the same configuration. This was the original configuration for PBP at the upgrade time:
The 5220 wasn't loggin

...

Screenshot 2023-06-21 alle 13.32.49.png
Screenshot 2023-06-21 alle 13.14.05.jpg
Screenshot 2023-06-21 alle 13.14.44.jpg
Screenshot 2023-06-21 alle 13.47.53.png

Dual ISP failover - stuck UDP sessions

Hi, I've configured Dual ISP failover using a PBF and everything seems to failover from ISP1 to ISP2  just fine. My issue is after we have failed over to ISP2 and ISP1 comes back online, not all traffic flips back to ISP1. 

 

UDP sessions for devices t

...

GobalProtect setup accross multiple standalone FWs in Azure

Hi All,

 

current setup more or less..

 

                                      |---PAN FW1---|

internet -->--- Ext LB----                         ---Int LB--------Azure Env

                                      |---PAN FW2---|

 

PAN FW1 and PAN FW2 a

...

PA_nts by L3 Networker
  • 1451 Views
  • 7 replies
  • 0 Likes

Export/import tool using set commands

"Hello to the Palo Alto Networks community,

After conducting research on the tasks of exporting and importing configuration file in PA-VM version 10, I've learned that using file transfer protocols like TFTP and SCP allows for the export and import o

...

RChan39 by L0 Member
  • 391 Views
  • 0 replies
  • 0 Likes

PA-3220 after upgrade into 10.2.6

Experience applications flow issue, most of the sessions incomplete (i deleted all active sessions with no resolution), reboot, fail-over several times, no luck. I opened a ticket with Tech support for advance packet flow process analysis no resoluti

...

elmgbar by L1 Bithead
  • 1115 Views
  • 5 replies
  • 0 Likes

DH group 15 not supported in phase 1 with IKE v1?

I need to migrate an old firewall to a PA-440 and came across an ancient IPsec where they have used DH group 15 for both phase 1 and 2. According to the docs for PanOS 10.2 DH 15 is now supported but the 440 whines about DH15 in phase 1 as I use IKE

...

Resolved! License renewal

Please confirm if the expired PaloAlto licenses can be renewed?

If “YES”, Please confirm which of the expired PaloAlto licenses can be renewed?

not able to open support case

Hi,

 

When I try to open support case error message coming up saying "Problem Category is missing".

 

Although I select the product as PAN-OS while creating the case.

 

BR,

Alaa

aasaggaf by L0 Member
  • 352 Views
  • 1 replies
  • 0 Likes

Best upgrade practice with HA Pair ?

We are preparing to update this weekend to 10.2.7 to resolve the expiring root certificate issue. We have an HA pair that we want to failover while upgrading as to not disrupt service. While I have the upgrade path from the Palo documentation what I

...

Walt by L1 Bithead
  • 887 Views
  • 1 replies
  • 0 Likes

Setting Up Double NAT over a site-to-site VPN

Hi,

 

I've been trying to read up on if it is possible to set up what Cisco would call "Twice NAT" on Palo Alto, and while there seems to be a lot out there for really odd fringe cases, I'm struggling to find anything on what I think would be a reall

...

BGP failover not working as expected

Hi

 

Our PA 220 is running 2 eBGP's  with 2 CE (WAN) routers.

Those 2 CE routers will run eBGP with respective ISP's. 

 

We control the routing through Local preference. 

 

Routes learned via primary CE 1 has LP of 500

Routes learned via secondary CE

...

Paloalto can't block hotspot shield.

 

Dear all,

 

I am currently facing paloalto can't block and see hotspot shield app.

Our organization do not want to use ssl decryption to block hotspot shield.

 

Any other solutions to block hotsport shield without decryption ???

 

 

Thanks.

 

 

zm.tun by L1 Bithead
  • 7101 Views
  • 8 replies
  • 0 Likes
  • 24131 Posts
  • 102 Subscriptions
This widget could not be displayed.
Top Solution Authors
Top Liked Authors
Labels