General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Thank You for Filling Out the LIVEcommunity Experience Survey!

If you've visited LIVEcommunity anytime recently, you've probably seen a pop-up asking for your feedback. We've deployed this survey since April 2020 for new and returning visitors alike as a way to gather feedback from our users. 

 

In the past six

...

survey-livecommunity.png
jforsythe by Community Team Member
  • 14575 Views
  • 1 replies
  • 4 Likes

Security profile group best practice

HI guys, I've read most of the reference material by Palo alto only applying security profiles on inside->out security polices but not outside->inside polices. I would think that is a given since outside->inside policies are to protect your front fac...

No wildfire submissions (FWD_ERR_CONN_FAIL_PUB errors)

 

Hi there,

 

Wildfire is not submiting files. I have the simplest configuration possible, and I'm using the test file (https://wildfire.paloaltonetworks.com/publicapi/test/pe). However, nothing is getting to the portal, or logs for that matter.

I'm runn

...

Hwinter by L2 Linker
  • 3000 Views
  • 7 replies
  • 0 Likes

SNMP MIB 7.1

Has anyone been able to load the 7.1 mibs? I keep getting "Import from missing MIB snmpv2-SMI" errors.

GFN182 by L2 Linker
  • 578 Views
  • 0 replies
  • 0 Likes

Configure GlobalProtect With Public IP adresse

Hello

 

1-i have the router adsl with the public ip adresse : ex 41.137.11.123 (WAN interface) ==> this is a Public/fixe IP adresse.

2-i have a paloAlto firwall, is connected by its wan interface (192.168.1.2) to the local interface of the router adsl (

...

Resolved! Call API key via invoke-restmethod

Is Palo Alto's API able to accept GET requests from the PowerShell "invoke-restmethod" cmdlet which have the api key set as a variable?  I ask this because I would like to run these requests without embedding my API key in the HTTPS GET request.  Thi

...

Log forwarding "Zone Protection" ?

I can't find an up to date way to enable log forwarding for "Zone Protection" profiles.

 

I found a guide for 6.1 but its not relevent for 8.0

 

I want alerts when we get port scanned.

 

Cheers

 

Rob

SSL Decrypt and GitHub

I keep fighting this SSL Decypt issue with my PAs, its almost getting to the point where its not worth running the SSL decrypt function because it causes so many issues. I am currently having issues with people downloading a zip file from git hub. 

 

g

...

Resolved! PA is Default Deny

Stupid question. Just need confirmation.

PA (42020) devices are default deny correct?

If a packet is not specifically allowed or denied by a rule; when it gets to the bottom of the rules the default action is to deny, correct?

thanks

--CH

choff123 by L3 Networker
  • 3435 Views
  • 4 replies
  • 0 Likes

Port analyse by TCPDUMP

Hello All,

 

I would like to capture packet by tcpdump on other interface than management interface.

How can do it ? (please explain more detailled as possible).

 

Thanks for your help.

GB.

Global Protect and Bandwidth Considerations

Looking for feedback on what you all have experienced with GP VPN for a user count of over 2k users. 

 

Specifically what type of INet circuits that were needed.  What was the amount of bandwithd which was seen on the circuits?  Finally, is there any s

...

Resolved! App-ID Mismatch for symantec-endpoint-manager

Is there any experience with 'symantec-endpoint-manager' over tcp/8014 being mis-identified as web-browsing?

 

We have a 5260 firewall in a datacenter environment, with hosts that need to access a Symantec-Endpoint-Server for AV updates.  Clients acces

...

chrislss by L1 Bithead
  • 2072 Views
  • 4 replies
  • 0 Likes

Global Protect logging out right after it logs in

On the PAN 5020 I can see in logging that user successfully authenticates with MFA and radius but within a second it says the user has logged off. I know that in fact the user did not log off. I hope to grab some logs at the client next week. But I f

...

Top Liked Authors