This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Explicit and Implicit Allowed / Denied Apps?

I am trying to understand the relationship between apps and how rules for specific apps affect the access of other apps. I was reading this article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClirCAC In there, it uses the example of "facebook" which has dependent apps like "facebook-base". If I was looking through...

777GE09 by • L0 Member
  • 6986 Views
  • 2 replies
  • 0 Likes

Logging to Panorama VM

To cut a long story short..... we lost Panorama VM. (ESX)i removed firewall (3020) from Panorama management and selected "disable Panorama Policy and Objets" in Device\Setup\Panorama settings.imported policy and objects before disabling. built new VM 8.10 and upgraded 3020 to 8.17.Added new Panorama and selected "Enable policy "etc... Imported 3...

panlog1.png
panissue2.png
Mick_Ball by • L7 Applicator
  • 3454 Views
  • 2 replies
  • 0 Likes

single vsys to multi vsys setup

Hi So i have a cluster setup as a single vsysI want to introduce a vendor GP setup - i have some vendor that want remote access to equipement and I want to allow them that access but limited to just that. I want to get around the accidental giving them more acces than they need. so I though tsecond vsys. I presume I can then just set policies...

(EDU-110) Player is not playing certain videos -Firewall 9.0 Essentials: Configuration & Management

The Open Curriculum player fo Firewall 9.0 Essentials: Configuration and Management (EDU-110) Player is not playing certain videos. I have reached Intial Config > Initial Sytems Access > Configuring Service Routes and the video will not play. I can still play videos from previous sections and certain videos from future sections (i havent...

Dual IPsec Tunnel to same destination with ECMP

Hi everyone,I would like to set up two ipsec tunnels to the same destination. I know I could do this by assigning the tunnel interfaces different metrics in the VR. But if I do that, only one tunnel will forward traffic at a given time. In our setup traffic needs to actively flow over any tunnel that is up: Can this be achieved with ECM...

topology.PNG

PANOS 8.0.0 EDL requires certificate

Hey guys, Just set up Minemeld, upgraded to PANOS 8.0.0, running into an issue with seeting up the EDL, the source (https://minemeld.local/feeds/inboundfeedhc) being HTTPS, PANOS now requires a certificate profile for the communication to work - what shpuld be configured there, and what -if anything- on the minemeld server? Great tool by the...

luks by • L1 Bithead
  • 34002 Views
  • 12 replies
  • 0 Likes

ADUC not loading while GP is connected

When Global Protect is active (be it at home or on site) it is nearly impossible to work with 'Active Directory - Users and Computers'.It takes easly up to 10 minutes -and longer- before it is loaded and every action/click that involves loading or changing someting (for example the 'Properties' of a person) takes at least another 5 minutes. When...

RedDevil by • L0 Member
  • 5839 Views
  • 2 replies
  • 0 Likes

Password issue in IPSec tunnel

when then IPSec tunnel attempts to connect after a reboot, it seems like the credentials used to connect disappears and needs to be entered in manually. We do manage this all via template in Panorama but it doesn’t looks like it is keeping the settings.

Resolved! GP VPN users cant connect when we run PAN-OS 8.1

Hi Has anyone had any issues with users connecting in using global protect once they have upgraded from PAN-OS 8.0.15 to any version of 8.1? I had a change window the other night and updated to 8.1.6 which everything worked fine except for VPN access, people connecting in would constantly be prompted to type in the token passcode. We could see e...

CRDF18 by • L2 Linker
  • 9945 Views
  • 13 replies
  • 0 Likes

Resolved! Inter Zone traffic

I have created a policy rule in palo alto from INSIDE zone to OUTSIDE zone all the traffic is allowed. and I am able to ping from a inside device to a outside host however when I try to ping from outside host to the inside host it is not working. Do I need to create allow rules from OUTSIDE zone to INSIDE as well?because in ASA when we intiate t...

Resolved! Dual outside interfaces, using DHCP, static route and path monitoring -commit error

I have an issue with a PA.220 running 9.0.2 setup, using dual DHCP assigned outside interfaces.I can remove the "auto created default route" in the interface's IPV4 config.And also create both new default routes with metric 10 and 20. But when I try to add path monitoring to the static routes I get the following commit error:Can't get vr id(Modu...

LasseN by • L1 Bithead
  • 7328 Views
  • 3 replies
  • 0 Likes
  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks