General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Atlassian custom Miner and Feed

I am trying to create a miner/feed for Atlassian IP-Ranges which they publish in a JSON file. I have configured the below and it all looks good and I have Indicators, but when I go to the feed URL it returns a blank page.

 

I created the prototype by

...

JDomNY by L1 Bithead
  • 14591 Views
  • 5 replies
  • 1 Likes

Resolved! PA traps certificate expired

Hi,

 

We have ESM Console and server using SSL certificate. This  certificate has expired so we lost communication between traps and agents, and we only connect to ESM from the own server.

How can i renew the certificate SSL???? Its mandatory to install

...

Disable HTTPS

All:

 

I'm running MM Community edition, and for lab testing I need to disable the HTTPS redirect.  I have followed the guide here, but still cannot get the HTTP-only running on the nginx:

 

https://live.paloaltonetworks.com/t5/MineMeld-Discussions/Disab

...

KorkLM by L0 Member
  • 3384 Views
  • 1 replies
  • 0 Likes

Resolved! Error polling virus total

I'm running into an issue with the virus total miner. Once the API key is set it continues to throw this error:

 

2017-09-08T14:24:58 (2986)basepoller._actor_loop INFO: virustotal_notifications-green - command: 1504880698052 poll 2017-09-08T14:24:58 ...

chirss by L3 Networker
  • 6399 Views
  • 6 replies
  • 0 Likes

Newbie: Local (wildcard?) certificate(s)

I'm running a VM-100 with several zones where I have MS AD / WSUS in one, two zones with lots of wireless device management, another zone for vmware management etc.

 

Every day I run into web browsers yelling about unsecure acces to local device manage

...

Resolved! Base ID manager is reset

Anyone run into this issue? It raised a "Critical" log but appears to have occurred during a validate. Having issues finding any references on this alert discription.

 

Base ID manager is reset - System Log

 

ert.png

ADSSP Integration for Cached PW Update

Wondering if anyone has successfully integrated ADSSP Cached Credential Updating with PAN VPN and GlobalProtect client.

 

Have tried to find command line references for the GP client but am coming up blank. 

 

ADSSP needs to call the VPN connection durin

...

inter-logger-agent message in Panorama

Anyone know what this message refers to, and/or suggest any steps to trouble-shoot?

 

 

The message is showing up in System log of a backup Panorama M-500 manager.  X.X.X.X is the IP assigned to dedicated port on primary Panorama M-500 manager.  The int

...

fl1654 by L3 Networker
  • 2540 Views
  • 2 replies
  • 0 Likes

Resolved! Microsoft Windows Auto Pilot and SSL decryption

 

Hi Everyone,

 

Seems the Microsoft Windows Auto Pilot does not work when SSL decryption is enabled.

I tested see no drops on the global counters and nothing on PA PCaps.

 

When disabled SSL decryption it worked fine.

 

Any ideas?

 

Mike

MP18 by Cyber Elite
  • 4737 Views
  • 4 replies
  • 0 Likes

Resolved! Query on HA1 link

Hello,

 

We have an Active-Passive setup. The HA1 link in the Active unit shows down (red) if the Link settings are set to auto/auto.

If I change the settings to 100mb link, full duplex and link state to up, the port shows up (green).

Shouldn't it work i

...

Auto.png
Full.png

Authenticating with Captive Portal

I just got off the phone with technical support and the technician said that the only traffic I can authenticate is http/https. Can someone confirm that the use case below is not valid? 

 

Here is what I want to do:

 

Use HTTPS to authenticate a user 

 

Af

...

joynert by L1 Bithead
  • 6793 Views
  • 12 replies
  • 0 Likes

Exclude account(s) from authentication?

I know there is the allow list, but what about an exclude?  We use Captive Portal for BYOD and have thousands of accounts we want to allow, but exclude our double digit generic accounts from being able to log in.  What's the best way to achieve this?

  • 24005 Posts
  • 102 Subscriptions
This widget could not be displayed.
Top Solution Authors
Top Liked Authors
Labels