General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Server Monitoring Not Connected

Hello, Microsoft AD under Server Monitoring is showing as 'not connected.'We would like to use the PAN-OS Integrated User-ID AgentOutput from debug commands show UserID Debug Log is enabled but nothing is logging. Anyone encountered similar issue?

Resolved! Multiple malicious scans from the same source address - can I block IP automatically

Occasionally, I notice that the firewall has been blocking tens or even hundreds of attempts from a single source address for multiple threats. In a case like this, it seems obvious, for someone looking at the logs, that that source IP should have been temporarily blocked and possibly banned, but that does not happen automatically. We do have...

Cisco ISE and Palo Alto TACACS

Few questions here. Why do you need user local on the PA devices?Why do you need those users local on the ISE box rather then allowing access from AD groups via ISE?If the users are local then password changes are not possible when a user changes their AD password, so how does that work?

Resolved! URL Filtering & Blocked Countries Response page

I have custom URL filtering response page enabled which works; however, I have noticed that when users get this response page, the URL category is correct and is allowed. When further investigating the issue, we found that the URL/Site is blocked by the Blocked Countries policy instead of the URL category Is there a way to include the actual pol...

MikeHamm by L1 Bithead
  • 3105 Views
  • 1 replies
  • 0 Likes

Panorama Device Removal

I had to rebuild Panorama 7 on ESX as for some reason after a power outage the image could not be restored... New installation completed and licensed but I cannot get the firewall 3020 to connect. I have removed the Panorama settings from firewall and re-applied. I have added the serial number to Panorama but the firewall is complaining..... Err...

Mick_Ball by L7 Applicator
  • 4343 Views
  • 4 replies
  • 0 Likes

Resolved! Global Protect - Newly Imaged Laptop, first time login before Windows login

Hello, Been trying to look around about how to do this but not finding anything. So we are moving from AnyConnect to Global Protect. The transition has been fairly smooth but ran into a unique issue yesterday. We have a small number of user's who are remote who can't come into the office and they are getting a new laptop shipped to them. In t...

Global protect

Hi team,How can i extract a detailed report on the list of all Global protect users (VPN users). this report aims to get the date each user was created. this is for audit reasons and i would appreciate if any one has a solution. thanks

Abduba by L0 Member
  • 2836 Views
  • 2 replies
  • 0 Likes

collecting palo alto firewall logs with Graylog 2.5

Dear palo alto community, I collect the palo alto firewall logs with Graylog 2.5.When i make an ssh connection to the fw palo alto with an incorrect password, this ssh connection does not get into the logs on Graylog interface web why ? To configure the syslog profile I followed this linkhttps://knowledgebase.paloaltonetworks.com/KCSArticleDetai...

Ayoub2 by L1 Bithead
  • 12258 Views
  • 9 replies
  • 0 Likes

Resolved! How to configure multiple routes at once

Need to configure a firewall with the same 100+ routes that exist on another. Is there a way to copy the routing table from one FW to another via CLI? Can I copy the "show routing route" output and configure multiple routes on another using this output? CLI example would be helpful.

Resolved! Botnet Report Missing 8.1

We are running 8.1.7 and discovered the Botnet report is missing from the monitor tab on the gateways. Does anyone know where this report went? PAN-OS 7.1.X PAN-OS 8.1.7

arr.jpg
arr2.jpg

Add Company to Customer Support account

Hi, does anyone know how to add a new company into your Customer Support Account? I already have an account with a client in it. I need to add another client, then I can register their PAs. I can't find this information anywhere.Thanks

WRibeiro by L1 Bithead
  • 2744 Views
  • 1 replies
  • 0 Likes

LogRhythm Threat Intelligence Service crashes MineMeld TAXII

I have a LogRhythm Appliance and the Threat Intelligence service is able to register my TAXII datafeed. However when I try and donwload the feed, the minemeld web server crashes. The feed also crashes using PostMan ... same thing, rabbitmq crashes and restarts. 127.0.0.1 - - [18/Nov/2016:20:53:55 +0000] "POST /taxii-poll-service HTTP/1.0" 2...

kmerolla by L0 Member
  • 10990 Views
  • 5 replies
  • 0 Likes
  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
Labels