This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Intel MDS Attack

Can anyone help to provide more information if below CVE are impacted in Palo Alto product line?Intel Microarchitectural Data Sampling Vulnerabilities (Fallout, RIDL, Zombieload) (CVE-2018-12126 , CVE-2018-12127, CVE-2018-12130, CVE-2019-11091)

Collect syslog information

Hi, We are going to add a new syslog server in PA config. So we would like to do a bit audit about PA supporting syslog sessions.What si the best way to know:-Volume of traffic per day for syslog-Top10 destination syslogs-..... thanks.

BigPalo by • L4 Transporter
  • 3804 Views
  • 3 replies
  • 0 Likes

Overlap-Zone difference Vsys

HI Expert , I would like to know that it can be possible about overlap zone name but difference Vsys such as I would to defind name Zone "Trust" on vsys1 and would to zone name "Trust" on vsys2 as well Please suggest to me Thank you

Resolved! Alert When Accessing Application

Good morning! I'm trying to figure out if it's possible to throw an "alert" log entry when a specific application is accessed. I know it can be done with categories, but I'd like to do the same with specific applications. I can always filter my Traffic Monitor for that application, but sometimes it's much more convenient to set the "alert" statu...

GCSS-RT by • L2 Linker
  • 4345 Views
  • 4 replies
  • 0 Likes

Resolved! cloud based proxy via IPSEC vpn and the way DPD is implemented on palo alto

Hello.so I've got a curious little problem and wanted to get some opinions before possibly creating a feature request at PA. we have a customer using a palo alto as his main firewall.and a certain cloud based proxy as their proxy.connecting to this proxy is done via IPSEC vpn tunnel.our customer noted that sometimes they lose connectivity to the...

Do you need Windows Server 2019 support for User-ID?

If you think you will need Windows Server 2019 support for User-ID, ask your PA rep to vote for feature request ID# 11012! We just upgraded all of our domain controllers organization-wide to Server 2019 only to find out that User-ID does not work with Server 2019 DCs. Now we must replace all of the DCs yet again with Server 2016 DCs in order to ...

GabeC by • L1 Bithead
  • 11450 Views
  • 10 replies
  • 1 Likes

Best Practice: Allowing a known application together with a custom service.

Let's say we have 2 zones seperated by our PA firewall, Zone A and Zone B. Traffic between Zone A and Zone B is only allowed for some applications/services from dedicated devices in Zone A to dedicated devices in Zone B. We have a custom Service which uses TCP port 7777 named CustomService1. Device 1 in Zone A needs to access Device 2 in Zone B ...

Import LDAP Groups

All, I am trying to import my LDAP groups, but don't want all of them. I have too many groups to put them in the Include list. I also have a large number of local.admin and Folder Access security groups. SInce I can't filter by OU, how can I filter using negate and wildcards for the security groups I don't want? I am trying to use something l...

Zone protection - Show hops between source & dst.

Hello, I want to see the hops between the source and destination when I do tracert from my PC to an IP.The tracert is shown as completed. I followed the following kb but didn't work: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfsCAC I disable Zone protection from the Zone initiating the conection(Trust) a few mi...

2019-05-16 16_31_47-C__Windows_system32_cmd.exe.png
upatino by • L1 Bithead
  • 3171 Views
  • 1 replies
  • 0 Likes

Traffic is not getting Natted DIPP

We have Single Outbound PAT configured for internet traffic for all internal users.So all users traffic use the same Outbound PAt while going to internet but one traffic is not getting natted with this NAT policy There is no PBF configured, its simple NAT (Outbound PAT DIPP), Security Policy (From trust to untrust).PAN-OS 8.1.6 h2Request to fine...

Automatic email alerts: Sinkhole and security policies

Hi Community, This query is for PAN-OS v8.1.X I am trying to generate an email alert when the firewall sees an (action eq sinkhole) event or when the security policy created to sinkhole an infected host is used. Email Profile(s) have already configured and so has Sinkhole. What is the best way to configure both, the email alert for the (action e...

ash83 by • L2 Linker
  • 4462 Views
  • 1 replies
  • 0 Likes

Custom URL category enforcement in URL column

I'm seeing some different behavior from our firewall on 8.0 code. I've got a few rules setup wtih both security URL profiles, and the URL category column. I've got a few custom URL categories made that match certain traffic. What I'm finding is that the second I include a category in the URL column, even if my URL profile has the custom categ...

Sec101 by • L4 Transporter
  • 4857 Views
  • 5 replies
  • 0 Likes
  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks