General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4125 Views
  • 0 replies
  • 0 Likes

Palo Alto Vulnerability Points (Urgent Action Required)

Hi Team, Can anyone provide your valuable suggestion here please.Below are the VAPT points shared by customer and solution provided : PA Vulnerability points (For reference please find attached pdf) :1) ssl/tls protocol initialization vector implementation information disclosure vulnerability (BEAST) - SSL/tls profile needs to be configure for f...

Resolved! How to Block browser extensions

Hello, Does anybody know if it is possible to block specific browser extensions from being downloaded?I would like to block the searchencrypt browser extension. Thanks

Any way to get this scenario configured?

I have GP Gateway license on my PA-5020 firewalls. I would like to allow 200 corporate owned samsung phones to access the VPN and block all other mobile phones. what are all the options I have to selectively allow them other than having a certificate authentication(because I have external clients connecting to same portal/gateway on laptops)? th...

Explicit and Implicit Allowed / Denied Apps?

I am trying to understand the relationship between apps and how rules for specific apps affect the access of other apps. I was reading this article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClirCAC In there, it uses the example of "facebook" which has dependent apps like "facebook-base". If I was looking through...

777GE09 by L0 Member
  • 6580 Views
  • 2 replies
  • 0 Likes

Logging to Panorama VM

To cut a long story short..... we lost Panorama VM. (ESX)i removed firewall (3020) from Panorama management and selected "disable Panorama Policy and Objets" in Device\Setup\Panorama settings.imported policy and objects before disabling. built new VM 8.10 and upgraded 3020 to 8.17.Added new Panorama and selected "Enable policy "etc... Imported 3...

panlog1.png
panissue2.png
Mick_Ball by L7 Applicator
  • 3294 Views
  • 2 replies
  • 0 Likes

single vsys to multi vsys setup

Hi So i have a cluster setup as a single vsysI want to introduce a vendor GP setup - i have some vendor that want remote access to equipement and I want to allow them that access but limited to just that. I want to get around the accidental giving them more acces than they need. so I though tsecond vsys. I presume I can then just set policies...

(EDU-110) Player is not playing certain videos -Firewall 9.0 Essentials: Configuration & Management

The Open Curriculum player fo Firewall 9.0 Essentials: Configuration and Management (EDU-110) Player is not playing certain videos. I have reached Intial Config > Initial Sytems Access > Configuring Service Routes and the video will not play. I can still play videos from previous sections and certain videos from future sections (i havent...

Dual IPsec Tunnel to same destination with ECMP

Hi everyone,I would like to set up two ipsec tunnels to the same destination. I know I could do this by assigning the tunnel interfaces different metrics in the VR. But if I do that, only one tunnel will forward traffic at a given time. In our setup traffic needs to actively flow over any tunnel that is up: Can this be achieved with ECM...

topology.PNG

PANOS 8.0.0 EDL requires certificate

Hey guys, Just set up Minemeld, upgraded to PANOS 8.0.0, running into an issue with seeting up the EDL, the source (https://minemeld.local/feeds/inboundfeedhc) being HTTPS, PANOS now requires a certificate profile for the communication to work - what shpuld be configured there, and what -if anything- on the minemeld server? Great tool by the...

luks by L1 Bithead
  • 33164 Views
  • 12 replies
  • 0 Likes

ADUC not loading while GP is connected

When Global Protect is active (be it at home or on site) it is nearly impossible to work with 'Active Directory - Users and Computers'.It takes easly up to 10 minutes -and longer- before it is loaded and every action/click that involves loading or changing someting (for example the 'Properties' of a person) takes at least another 5 minutes. When...

RedDevil by L0 Member
  • 5668 Views
  • 2 replies
  • 0 Likes
  • 24336 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels