This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

IPv6 duplicate issue

Hello,is there anyone had an issue of duplicate IPv6? i coundn't able to ping next hop ipv6 ip. i worked with PAN TAC even they don't have answers just suggested to change different ipv6 subnets, tried by changinging different ipv6 subnet couldn't fix the issue. Our network envirnoment has same architucture for ipv4 and ipv6 but ipv4 working p...

Resolved! Password problem

HI All, I last logged into our VM-300 on friday 23rd August to make a SSL Decryption config change and attempted to login again yesterday. However all of a sudden my admin password doesn't work. I'm the only one who knows the password anyway, so no one else has access to it. There are two admin accounts and neither password works now. The only a...

Resolved! Maximum number of OSPF routes supported

what is the maximum number of OSPF routes supported on PA3020 and PA3220.I have checked the maximum number of routes using the command show system state | match cfg.general.max-route.Is there any specific limit for OSPF routes in the routing table ?@reaper, @gwesson, @BPry Your inputs are much appreciated. Regards,Syed Mohamed Ishaq

APPLICATION INCOMPLETE

Good day All i had read all the possible solution to this issue, but still presenting the same symphtom, i have applied all solutions mentioned on all posts. does anyone had or did something different? thanks in advance.kind regards.

Capture.PNG

Direct web traffic to internal proxy

For some reason oun of our MS GPO's is failign to apply ( or rather is wiping ) proxy server settings for our users. The users shoudl be hitting the proxy before going through the PA, but it's broken.USER-Website:80:443 --> PROXY:8080 --80:443--> --PALO --> WORLD I am trying to fatom how to get teh PA to transparently pass traffic to ...

fw1.jpg

Caveats for changing interface netmask?

I've got a client that wants to expand the network range on one of their interfaces for additional DHCP scope space, moving from a /24 to a /23. I wanted to check if there are any caveats to this on the PAN side? Will the update take effect as soon as the change is commited?I'm currently scoping out the rest of the network to confirm if anythi...

migrating configuration from physical appliance to Azure VM

Hi community, I´d like to check with you if there´s a way to migrate/adapt the configuration from a physical firewall to be imported into an Azure´s VM? Could it be possible importing into the Migration tool both configuration files...1. snapshot from physical appliance2. the sample configuration file from Github repositoryhttps://docs.paloalton...

Carracido by • L4 Transporter
  • 4751 Views
  • 1 replies
  • 0 Likes

URL Filtering Issue

Hello Community, I want to block one specific https URL (without applying decryption rule) but the traffic is being allowed by the lower policy. I have applied many combinations with the wildcards but none of them works.Can someone please help me with this.

JAIDEEP by • L0 Member
  • 2503 Views
  • 1 replies
  • 0 Likes

Asymmetric Routing and TCP Syn Check

Hello All, I have a scenario where I will be having two ISP's (ISP-A and ISP-B) connected to the PA Firewalls via eth1/1 and eth1/2 interfaces. Both these Interfaces will be in the same untrust-zone. ISP-A will be the primary one and ISP-B the backup with some prepends and local preference for incoming and outgoing traffic.However, ISP-B has con...

Anjush by • L0 Member
  • 5998 Views
  • 2 replies
  • 0 Likes

Global Protect and google play traffic from mobile

Hi all , I am running PAN OS 8.0.19 and GP 4.1.12 and users cannot access google play store while they are connected to the VPN from androids . I have tried with spli tunneling including 63 subnets from google and I have tried full tunnel defining in the ACLs IP any any just for tshoot but it seems I am getting in but cannot download any app . ...

Resolved! SSL Exclude Option Missing in 8.1

Hi Community, I noticed, that in 8.1.x (7,8,9, 9h4) the "SSL Exclude Option" in Device > Certificate Management > Certificates is missing.The PAN-OS 8.1 guide mentions this option on page 198, and you can see it in a screenshot in this KB point 7:https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClUjCAK Does anyone...

Chacko42 by • L4 Transporter
  • 5310 Views
  • 2 replies
  • 0 Likes
  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks