General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1932 Views
  • 0 replies
  • 0 Likes

Strange DNS issue for users

Hi All,

 

Any idea on this one?

 

I have some wireless testing underway which seemed to be going without issue. All of a sudden, any browsing to .co.uk domains stopped working, followed by .com domains failing as well. A short while ago, .co.uk domains s

...

a.jones by L3 Networker
  • 2995 Views
  • 3 replies
  • 0 Likes

Suppress GP notification

We have upgraded our GP Client to version 5.0.1-9

Since then we are getting notification window in bottom right which keeps on trying to connect while the device is on corporate network. We need to click on the GP icon to minimize the notification how

...

Resolved! Custom Report

We deployed our 5520 recently between our LAN and MPLS connections and the reports from Panorama are great but I'd like to be able to create a custom SAAS report with specific source - destination traffic excluded from the report. Is this possible an...

JonHill by L1 Bithead
  • 3626 Views
  • 1 replies
  • 0 Likes

Issue with UserId agent

Hi, 

 

We are having an issue connecting our UserID agent (version 7.x) with a DC in W2016. We have Userid agent version 7, we know that its not compatible useridagent 7.x with Windows server 2016, but we have several DCs in useridagent 7.x and one of

...

BigPalo by L4 Transporter
  • 2564 Views
  • 1 replies
  • 0 Likes

Resolved! MineMeld whitelist not working

Hello,

 

I have the problem that minemeld whitelists don't seem to work on our self-hosted minemeld version.

 

I have the following setup:removed miner names for privacy reasons

The wlDomeinAggregator contains a few domainnames, so they should be removed

...

Capture.PNG
folmer by L2 Linker
  • 3468 Views
  • 1 replies
  • 0 Likes

Upgrading HA setup in large steps

Hi,

I'm going to upgrade a PANOS 5.0.14 to version 7.1.

As I understand, the correct sequence is:
Update PAN-OS 5.0.14 to 7.1.x:
Download 6.0.0
Download + install latest 6.0.x release (reboot)
Download 6.1.0
Download+Install latest 6.1.x release (reboot)
Dow

...

Unrusted Cert Warning on IE

 

We have created SSL cert for the PA web gui from our internal CA.

When we access PA web gui via Chrome it is good.

 

When I use IE it get the cert untrusted cert warning message?

How can i fix this ?

MP18 by Cyber Elite
  • 3838 Views
  • 7 replies
  • 0 Likes

Odd duplicate ping issue. DUP

I have a strange issue.

 

I am setting up a new 850 HA pair A/P

 

To the outside world is a LACP Aggregate, connected to a HP switch. 

 

All was going well when testing, I can ping a dummy device (laptop) fine on the outside switch from the firewall.

 

But w

...

Do I need a NAT for traffic to pass??

I have an SD-WAN device at my internet edge that will be doing the NATing for the network. This is so that the device can decide which of 3 ISPs to use to forward traffic. My Palo Altos sit behind this device and will do the firewalling and URL filte

...

F5 failover connected behind PA

We have two F5 devices configured as active standby behind PA. The issue is on failover F5 failover ARP table on the PA is not updated quickly enough for smooth transition. Is there a way to mitigate this problem and increase ARP update time for that

...

raji_toor by L4 Transporter
  • 4384 Views
  • 3 replies
  • 0 Likes

Resolved! Block rogue VPN

I am seeing this in my system logs.

 

IKE phase-1 negotiation is failed. Couldn't find configuration for IKE phase-1 request for peer IP 172.250.246.42[500].

 

How can I block this? I been a Cisco guy for a longtime and new to Palo Alto. On my old cisco

...

Panorama VM 8.1.5

Hi all,

 

just got this case, where the client shutdown the Panorama 8.1.5 for maintenance. But once reboot, and login to the device he will not see the ">". if he performs any commands there are outputs. But the prompt is missing. He reloaded the devi

...

Shadow by L2 Linker
  • 4542 Views
  • 2 replies
  • 0 Likes
  • 24197 Posts
  • 117 Subscriptions
Top Liked Authors
Labels