General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

file blocking profile but allow some apps

Hi 

 

We have recently enabled file blocking on all our web access rule and it works a treat, but looking at the data filtering logs i can see the likes of Google Chrome being blocked.

 

I have played around creating a seperate rule, that is above the ma

...

CRDF18 by L2 Linker
  • 2759 Views
  • 4 replies
  • 0 Likes

LSVPN Satellite Reconnection Time

Does anyone know how to decrease the time between LSVPN Satellite connection attempts?

 

If one of our satellites drops off (e.g. reboot/power outage/etc), after it comes back up it will take up to an hour to connect to it's nominated Gateway. Also, if

...

EDL- Predefined Paloalto IP Lists do not update

Hi guys,

 

my PA is still with the initial set of roughly 500 IPs in the two predefined IP lists which do not update; it is said those lists are part of the AV signature updates which run well. I also have confirmed with the CLI that its is not a GUI p

...

pan219 by L2 Linker
  • 2454 Views
  • 2 replies
  • 0 Likes

Panorama templates for an Active/Passive setup?

I'm in the process of setting up our new firewalls.  I went ahead and set up management on each of them, got them updated, got them paired up into Active/Passive, and am now following the Palo Alto 8.1 guide to migrate an HA config over to Panorama. 

...

jsalmans by L4 Transporter
  • 2184 Views
  • 2 replies
  • 0 Likes

Resolved! 5250 HSCI port compatibility?

Greetings all,

 

I should be getting our new 5250 firewalls in any day now and I'm trying to get my cable shopping list together so we can start working on our install process.  I noticed the HSCI port for the A/S config uses a 40/100 port and, giving

...

jsalmans by L4 Transporter
  • 2623 Views
  • 1 replies
  • 0 Likes

Behaviour of VPN tunnels in HA pair during the failover

Hi

Can anyone please explain the behaviour of VPN tunnels during the failover on PAN.

Does the ISAKMP and IPSEC SA table gets passed on to the standby unit ?

Does the VPN tunnels will re-estalish the session again  on the new active unit after the failo

...

R_Sharma by L2 Linker
  • 7525 Views
  • 3 replies
  • 0 Likes

Resolved! different wildfire version

Hello,

 

We have a couple of PA3020 but only one of them have different wildfire version as currently installed once we saw failed wirdfire update messages. Is it normal behaivior to have a different wildfire verison instllaed even though it is the sam

...

Panorama Templates and default vsys settings?

What is the purpose/consequence of a having a template with a default vsys set to either : vsys1 or None -

This is found under: panorama/templates/(specific template name)/Default VSYS/(option of vsys1 OR None)

 

I'm finding that our firewalls with mult

...

Sec101 by L4 Transporter
  • 5315 Views
  • 1 replies
  • 1 Likes

What the heck is in /pancfg?

Hi all,

 

I'm trying to figure out what is taking up all the space in the /opt/pancfg filesystem on my Panorama appliance.  I've deleted all the old saved configurations and lowered the number of config audit versions from 100 to 50.  (Each of these ve

...

Resolved! Global Protect with multiple portals and gateways.

I have a working portal and gateway on PA3020 running 8.0.12.

I want to setup another portal and geteway and repliciate all the settings.

Second GP will be used for testing purposes.

Only changes would be to use another public ip ,create another tunnel

...

OVA file

pa-vm-esx-8.0.ova 

 

I need to download the OVA file for training purposes. How do I go about getting a file?

  • 24197 Posts
  • 100 Subscriptions
Top Liked Authors
Labels