This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

HA1 Backup link went down root cause analysis

HI Team, I have issue in Palo alto firewall 3260 where HA1 backup link went down. Eventhough there is no production impact i'm seeing this issue happened without any cable change or any activity. This is due to ping failure for heart beat , But I want to know what caused this ping failure issue. I have already running PANOS 8.1.4-h2 which says r...

PA-500 registration

Hi there,I am completely new on this platform, to start learning this firewall I got myself a used PA-500 from the online market.I would like to register the device so that I can downloads updates unfortunately, I have got the device serial number but not the "Sales Order Number or Customer Id". What can I do the register the firewall and downl...

bngala by • L1 Bithead
  • 6412 Views
  • 6 replies
  • 0 Likes

No anti-virus response page for SSL

I have SSL decryption setup and working. When I go to eicar.org, the http test returns my response page. The https test doesn't return any response page; although I can see in the threat log that it was properly denied. The browser just spins waiting for something to return.I've attached a snippet from the log.Thanks,Todd

Resolved! Question About HA Failover (Require Assistance On Urgent Basis)

Hi Team,Can anyone provide your valuable suggestion here please? As per the below diagram, we have a active|passive HA setup both active & passive devices are connected in different switches. My query is if a active firewall uplink port went down, Does failover will happen or not?, My understanding is if the Failover takes place only ...

Nashik IPS Diagram.jpg

Can everything besides DCs be on 2019?

I know Server 2019 isn't supported yet on Domain Controllers for User-ID, but is there any other type of server that Palo needs access to that can't be upgraded? A team is asking if they can upgrade DFSR to 2019

Strange DNS issue for users

Hi All, Any idea on this one? I have some wireless testing underway which seemed to be going without issue. All of a sudden, any browsing to .co.uk domains stopped working, followed by .com domains failing as well. A short while ago, .co.uk domains started working again but sporadically. If I change the rule permitting the dns traffic from eithe...

a.jones by • L3 Networker
  • 3322 Views
  • 3 replies
  • 0 Likes

Suppress GP notification

We have upgraded our GP Client to version 5.0.1-9Since then we are getting notification window in bottom right which keeps on trying to connect while the device is on corporate network. We need to click on the GP icon to minimize the notification however we get the notification again on next restart. Our System tray setting 'show-system-tray-not...

Resolved! Custom Report

We deployed our 5520 recently between our LAN and MPLS connections and the reports from Panorama are great but I'd like to be able to create a custom SAAS report with specific source - destination traffic excluded from the report. Is this possible and if so how do I start building the report? Thanks Jon

JonHill by • L1 Bithead
  • 4021 Views
  • 1 replies
  • 0 Likes

Which is the best monitoring option for redundant IPSec Tunnel?

Hello. I'm trying to configure dual ISP and automatic IPSec tunnel failover.Network diagram looks like picture in here(https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFiCAK).And IPSec peer devices are Fortigate. Not like above article, I didn't make two virual router and I use static route monitoring feature to primar...

yhlee1 by • L2 Linker
  • 3126 Views
  • 1 replies
  • 0 Likes

Issue with UserId agent

Hi, We are having an issue connecting our UserID agent (version 7.x) with a DC in W2016. We have Userid agent version 7, we know that its not compatible useridagent 7.x with Windows server 2016, but we have several DCs in useridagent 7.x and one of them has already connected. We know that we should upgrade UserIdagent to 8.0.5 or later, but why...

BigPalo by • L4 Transporter
  • 2761 Views
  • 1 replies
  • 0 Likes

Resolved! MineMeld whitelist not working

Hello, I have the problem that minemeld whitelists don't seem to work on our self-hosted minemeld version. I have the following setup:removed miner names for privacy reasonsThe wlDomeinAggregator contains a few domainnames, so they should be removed from the CEF output node. When investigating the issue I found out that no 'withdraw' event is tr...

Capture.PNG
folmer by • L2 Linker
  • 3800 Views
  • 1 replies
  • 0 Likes

Upgrading HA setup in large steps

Hi,I'm going to upgrade a PANOS 5.0.14 to version 7.1.As I understand, the correct sequence is:Update PAN-OS 5.0.14 to 7.1.x:Download 6.0.0Download + install latest 6.0.x release (reboot)Download 6.1.0Download+Install latest 6.1.x release (reboot)Download 7.0.1Download + install latest 7.0.x release (reboot)Download 7.1.0Download + Install lates...

Unrusted Cert Warning on IE

We have created SSL cert for the PA web gui from our internal CA.When we access PA web gui via Chrome it is good. When I use IE it get the cert untrusted cert warning message?How can i fix this ?

MP18 by • Cyber Elite
  • 4393 Views
  • 7 replies
  • 0 Likes

Odd duplicate ping issue. DUP

I have a strange issue. I am setting up a new 850 HA pair A/P To the outside world is a LACP Aggregate, connected to a HP switch. All was going well when testing, I can ping a dummy device (laptop) fine on the outside switch from the firewall. But when I connect to the firewall to the upstream router, pings to google all get ( DUP ). If I conne...

  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks