General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 1886 Views
  • 1 replies
  • 10 Likes

Dual ISP IPSEC vpn tunnel monitor drops the connection

Hi all,

 

I added second ISP to firewall and created ECMP for dual ISP followed those guides:

 

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Implement-ECMP-Load-Balancing-on-the-Firewall/ta-p/110339#

 

https://live.paloaltonetworks.co

...

SShnap by L3 Networker
  • 2524 Views
  • 3 replies
  • 0 Likes

GRE support on PAN-OS 8.0

Hi,

is it possible to terminate a GRE tunnel on a PaloAlto? Parhaps there is something new in 8.0

 

Best regrads,

Sebastian

sst by L0 Member
  • 4040 Views
  • 5 replies
  • 0 Likes

Resolved! Log forwarding - Local on Gateway or Panorama

Hello - I have Firewalls configured with Log Forwarding to Panorama. The question is, do the traffic logs of the Firewall Gateway keeps the copy of the logs and send another copy to Panorama or does it have only one copy forwarded to Panorama

 

Can i c

...

PA VM licensing issue between support accounts

Hi,

 

Although looking through this in internal sources as well, but maybe you guys have seen this and have an idea.

 

Initially there was PA VM-100 trial registered in Support Account 1 - partner account. Everything's good.

Trial expired, full license wa

...

nikoo by L3 Networker
  • 3637 Views
  • 3 replies
  • 0 Likes

Web-Browsing default port application

Hey , 

 

i just wondered why in the era that all web traffic is moving forward beeing encrypted and browsers like chrome will soon mark websites that uses HTTP protocol as "unsage" paloalto "web-browsing" application still uses in it's default ports on

...

minow by L4 Transporter
  • 15871 Views
  • 5 replies
  • 0 Likes

Re:Minemeld Miner Config

Hi guys,

How can we creat a prototype miner in the MInemeld hosted by autofocus, is there any tech document with regards to how to customize/config a prototype for Miner.

Thanks 

Sanssj by L2 Linker
  • 2432 Views
  • 1 replies
  • 0 Likes

Resolved! Decryption servers same ip

Hi,

 

We need to decrypt traffic (SSL Inbound Inspection) for a server which is running 3 URL. This server has 3 certificates, one per application.

 

So we would like to decrypt traffic for this 3 applications but in decrypt policy we only configure usin

...

BigPalo by L4 Transporter
  • 1634 Views
  • 1 replies
  • 0 Likes

Resolved! Upgrading a stand alone PA-Firewall 3020 to a HA-Cluster

Hello everybody,

 

is there any article or best practice document which discribes the configuration of a Palo Alto 3020 Firewall HA-Cluster active/passive while there is already a working stand alone PA 3020 Firewall.

 

Is it the same way I configure a H

...

Mvdohe by L1 Bithead
  • 3251 Views
  • 5 replies
  • 0 Likes

Re: Vwire and L3 Deployment Decryption

Hi,
I would like to know the way it operates in the backend how palo alto does the SSL decryption in Vwire mode . As in a L3 deployment the connection will terminate on the firewall and firewall acts like a MITM and does the SSL Proxying. How is the c

...

Sanssj by L2 Linker
  • 1628 Views
  • 1 replies
  • 0 Likes

SSL Decryption Exclude List - correct syntax?

What is the correct syntax to exclude a whole domain, including subdomains and pages from SSL decryption?

 

Say exclude all URL's from "test.com", would this suffice:

 

*.work.com

 

or would i need to include a list like:

 

*.work.com

*.work.com/*

*.www.work.c

...

welly_59 by L3 Networker
  • 1314 Views
  • 1 replies
  • 0 Likes

IPsec VPN throughput

configured site to site ipsec vpn between PA 820(head offc)XG firewall (branch offc)successfully. in the head offc we have 100 mbps download , 25 mbps upload speed and brach we have 100 mbps download and 50mbps upload speed. the vpn performance is ve

...

Top Liked Authors