This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! How to install & upgrade Firewall new on client side

We had ordered the firewall and it's been delivered to client Now we want to configure and upgrade without distrubtring the current network what is the best way to do this or we had to bring it our side to configure and send back? Any document or client had to plug in separate network with the internet?

NavidAlam by • L3 Networker
  • 7531 Views
  • 8 replies
  • 0 Likes

Screenconnect App

Hi to all, this is Marco. I just update my 850 from PanOs 8.0.15 to 8.1.7.Now i can find in the APP list screenconnect.When i try to create a rule using screenconnect, the firewall tell me unknow-app.Keeping in mind that the destination addresses of screeconnect servers change often, please someone have some tips to help me ? Thanks indeed. Ciao...

User ID Agent: Connecting (The stub received bad data)

Hi Community, I have a problem with a User ID Agent issue.I'm sure it's not related to the Palo Alto software - more a microsoft thing, but maybe one of you guys experienced the same: User-ID Agent-Server: Windows Server 2012R2User ID Agent 8.1.8-3 We configured the User ID Agent in the morning and during the day, the Microsoft team did a domain...

Chacko42 by • L4 Transporter
  • 5594 Views
  • 1 replies
  • 0 Likes

Rules Not Applying Appropriately

Hello everyone! Let me preface this discussion questionb by acknowleding that I've inherited a PAN configuration that I know has issues. With that said, I'm noticing that some devices do not get the correct policies applied when others that are in the same groups do. I'm going to ask a question that may be WAY too generic. If it is, please tel...

GCSS-RT by • L2 Linker
  • 5049 Views
  • 5 replies
  • 0 Likes

global protect configuration

I was just wondering how other people have their globalprotect clients configured? Who used on-demand vs autologin. Who uses prelogin checks etc and what works the best

jdprovine by • L4 Transporter
  • 5231 Views
  • 5 replies
  • 0 Likes

Resolved! Which Global Protect Agent Configuration is applied?

We are using 8.1, Global Proect has one portal and two gateways (and internal and an external). The portal has 3 different agent configurations. How does one tell which of the Agent Configurations was applied/assigned to the user when they authenticate?

promig3 by • L0 Member
  • 3574 Views
  • 1 replies
  • 0 Likes

Blocking SNMP SET

Hi, I have no control on the SNMP Server so unable to enforce policy. As per security requirements I want to block / deny SNMP SET packets passing through Palo Alto firewalls as well as targeted to the Palo Alto firewall management plane. However I want to allow SNMP Get from specific SNMP Server and allow Traps to SNMP Server. I was wondering...

Resolved! nat and security policies ip object need a subnet mask or not?

in my firewall i use certain ip addresses for outside to inside natting and for security policies , but im wondering , under objects do i need to specify the subnet mask "/24 , etc" for each object host or not? i specified the mask for the inside and outside interfaces ip addresses but what about the objects in natting and security policies?

chuckles by • L2 Linker
  • 3889 Views
  • 1 replies
  • 0 Likes

Require historical report on Firewall Throughput, session , CPU and memory utilization.

Need to know about reporting feature on Panorama which provides historical ( last 30 days) utilization of Panorama manages firewalls.I know that there is an option in Panorama under Health Managed device Tab. but it could not provide statistics properly on the report.Also would like to know has a reporting done better in the new version?

DHS AIS Miner SSL issue after Feb 13th

Hello, DHS upgraded their server on Feb 13th and since then some people were seeing SSL errors. They told me, they have couple of organizations using Minemeld they are currently failing when they pull. The error i see in my system below. (8429)basepoller._poll ERROR: Exception in polling loop for US-Cert-AIS: <urlopen error [Errno 1] _s...

akapucu by • L2 Linker
  • 3942 Views
  • 2 replies
  • 0 Likes

VPN tunnel up alert mail

Hi Team If VPN tunnel goes down we have receive a mail alert by severity critical. If the VPN tunnel comes up how can I get mail alert ? Please advise.. RegardsMohammed Asik

New MineMeld install on CentOS 7 ... joined to AD domain. WEBUI login failing - bad creds

We have been running Minemeld on Ubuntu 18.04LTS, but since that OS is EOL I am working on a replacement server running CentOS 7. The server was built for me by the server team and was joined to the domain. I use my AD credentials to ssh to the server and then use sudo on the install commands. I used the instructions in github and the install w...

alterioc by • L2 Linker
  • 5391 Views
  • 2 replies
  • 1 Likes

Resolved! Device document error

Hello all, I have a PA-220 I am trying to import into Panorama, but am getting an error. I have added the Panorama IP on the PA-220 and the PA-220's serial into Panorama's Managed Devices, and it's showing connected. However, when I go to Import device configuration to Panorama, I get the "Device document was not found for configuration import...

  • 24443 Posts
  • 125 Subscriptions
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks