General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4118 Views
  • 0 replies
  • 0 Likes

Resolved! unable to download vmware_nsx from support site

Hello, I've been struggling for some time now to upgrade Panorama from version 8.0.14 with NSX plugin (build_in) configured to 8.1.9.I'm getting this error:In version 8.0 you dont have the option to check now to be able to upgrade the VMWare_Nsx plugin.And I've checked on the support website to find the plugin, but I cannot find it in any of the...

VMWare_NSX_Plugin_error.jpg
GNeyrinck by L3 Networker
  • 5235 Views
  • 4 replies
  • 0 Likes

Resolved! External Dynamic List: add manual entries?

I'm using MineMeld to scrape Microsoft's website to grab the list of Office 365 related URLs and IP addresses. We've noticed that this feeds in *.outlook.com, but not outlook.com. This results in the common Office 365 Outlook Web App URL https://outlook.com/owa/<realm>.mail.onmicrosoft.com not matching the External Dynamic List ("EDL") g...

getting frequent wildfire updates

Every 5 mins getting alerts related to Wildfire Previous week, we have alert now and then but not this often (5-10 alerts per week) what can be the cause if sudden spike in updates?? It's a medium level system alert saying "Successfully registerted to public cloud wildfire.palonetworks.com"

syslog reports (web usage)

Hi all, I do daily scripted syslog reports for traffic through the firewall. PA syslog messages are pretty good actually. However, the only messages that have something that resembles URL is the messages of the "THREAT url" pattern. Now, I accasionally need to do a web usage report for some managers on what their employees are doing. For that I ...

au_igs by L1 Bithead
  • 6790 Views
  • 8 replies
  • 0 Likes

Question About Panorama VR || CAN ADD SINGLE ROUTE WITHIN A VIRTUAL ROUTER FROM TEMPLATE IN PANORAMA

Hi Team, Can anyone provide your valuable suggestions, If no any other alternate way please. I'm facing issue with configuration of the devices using panorama. Please find the details of the issue mentioned below. 1) Using panorama access enabled for the IP address X.X.X.X in policies and created route for the same in network tab.2) Th...

connect-server-monitor-failure

Has anyone experienced numerous of these "connect-server-monitor-failure" alerts when using agentless user ID? I have 20+ firewalls using a few specific domain controllers to get user ID info, but these alerts are constantly, 100's an hour. It seems to be related to WMI memory error, but I've already increased the wmi memory, described in this a...

MikeC by L3 Networker
  • 14374 Views
  • 7 replies
  • 0 Likes

User-id doesn't work on SSID

I have PAN UID agent mapping IP-to-usernames. It works like a gem for internal users but not on the DMZ which allows company phones with their AD creds. I am not seeing any usernames for these users although they authenticate against AD server. has anyone experienced this before? Please provide me your inputs. TIA

Resolved! URL Filtering Rule-Allowed Users to websites stops working for a few seconds.

Hi Guys I have a problem,i set up URL filtering to block users from certian catogories and linked it to my security rule.-Works great. Created new URL filter to allow Management to catogories which is blocked,created new Security rule and linked new URL Filter-Also works,but then every few hours or so the Allowed rule gets bypassed and Allowed c...

Commit error profile compiler can not find tid 40006 in threat database

Hi, We are having issues with commit in the FWs from last Wednesday. The error that we receive is: "Error: Profile compiler : can not find tid 40006 in threat database". The commit finishes correctly, but with the warning of the error.We have revert the content update of the apps and threats to a previous one and the commit finishes correctly. W...

Commit error.png
Updates.png

NAT + DIPP question

Hi - we have experienced an issue where users in a certain zone were having intermittent problems accessing the internet. We speculated that there could be a NAT issue, and the pool might be full, or translations just werent working. The pool is large and it shouldn't be fillling up. As a troubleshooting step, we enabled overload / DIPP on the N...

Palo NAT question.png

POC in AWS - Palo Alto Active/Active under NLB

Working on a POC. Have two firewalls sitting under an NLB. One of the firewalls routes traffic to database. This appears to be a limitation on the VPC route tables. With traffic from App server destined for the DB, it goes through AZA palo alto. What advice do you have if this firewall dies? Anyone else experience the limitation with having ...

  • 24334 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels