General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1801 Views
  • 0 replies
  • 0 Likes

Resolved! Why Destination NAT has no option for Bi Directional?

Need to understand when we do destination nat why there is no option for bidirectional ?

 

For destination nat the return traffic comes without bi directional option not available due to the PA being stateful and matching

the session?

MP18 by Cyber Elite
  • 2928 Views
  • 2 replies
  • 0 Likes

Resolved! O365 sub-applications

Currently, our palo alto only detects the following O365 applications

*ms-office365

*outlook-web-online

*sharepoint-online

*ms-office365-base

*ms-teams

*ms-lync-online

 

Do we need to enable SSL decryption so that it can detect other sub-applications? (ms-do

...

blocking yahoo.com advertisements

So yahoo.com has some new, annoying advertisements that are behind/beside the web content.  Our PA-3060 with PanOS 8.1.4 is not blocking these AD's.   Anyone have advice on getting these blocked?

 

 

yahoo ad

yahoo ad.jpg
Jwaayers by L0 Member
  • 2696 Views
  • 1 replies
  • 0 Likes

Resolved! Update Path for User ID Agent

I need to update our User ID Agent from 7.0.0-23  to 8.1.7-5 or 9.0.1-5.  Do I need to follow an upgrade path or can I just go directly to the version needed for the User ID Agent?  Thanks in advance.  

Resolved! SSL inspection with Java applications

I have found that Java appears to use it's own certificate store which is causing me grief.  Work around is to install our root CA within the Java control panel but this is not efficient for a large organization.  Has anyone found a way to push root

...

DIRTT by L2 Linker
  • 6502 Views
  • 3 replies
  • 0 Likes

extending vlan

Hi,

 

I have two pa device , if . Both are in two differnet site . and I want to access the device in vlan10  from one site to another . 

How can i do that .

 

 

vlan 10 ----fw1 --------------fw2---vlan 10 

Thanks

 

simsim by L4 Transporter
  • 9438 Views
  • 13 replies
  • 0 Likes

Static route path monitoring

Hi All,

 

We have PA-820 models with Active-Passive configuration. 

 

I have configured the static route path monitoring based on this guideline - https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/networking/static-routes/static-route-removal-bas

...

ChiragP by L2 Linker
  • 5825 Views
  • 2 replies
  • 0 Likes

Problem with SIP traffic

Hello there!

 

I have a problem with SIP traffic for VoIP. It is a HA cluster that has experienced that problem with the SIP traffic for phone calls. For a number of hours, SIP calls could not be made or received. Mismatches with the config between act

...

URL Filtering Clarification

I have been wrestling with many people regarding URL filtering specified within the "Service/URL Category" tab of a security rule.  First off I don't have a URL license.  Let me continue... I have created a security rule that allows traffic to a URL

...

ScottF by L1 Bithead
  • 3064 Views
  • 1 replies
  • 0 Likes

Faulty Device - Config Wipeout

Hi Experts,

 

We want to remove the configuration from the failure firewall before shipping faulty device back to PA. Since firewall isn’t booting  up, we’d not be able to do “Factory Reset” to wipe out old config.

 

We need to delete old configs. Can so

...

is Cluster possible?

Hi all,

 

is quick question on above statement. is it possible to configure clusters with Palo Alto?

I do not mean Active/Standby or Active/Active

 

I was not able to find any documentation on this. if this is possible, could someone point me in this dire

...

New Comer

Hi Im new to working with Palo Alto, and I im process of configuring a new Pa-820, I wanted a lttle infomation and help. 

 

1) Do you have to create a return rule if you want the return traffic back from the destination back to your source address. Or

...

kev91234 by L1 Bithead
  • 5011 Views
  • 6 replies
  • 0 Likes

Cannot add SNMP

Hi,

 

I am trying to add Palo Alto firewalls to our monitoring system but one of our PA-220 is failing to be added.   

We use Panorama and PAN-OS 8.1.3.

 

 

Any idea how to fix this issue?

SNMP.jpg

EDL HTTP response code said error

Hi,

 

I am facing an issue where the External Dynamic List shows an error when tested by cli command "request system External-list show", the error is "HTTP response code said error", but whem the list is tested from any other device it is accessable a

...

  • 24239 Posts
  • 117 Subscriptions
Top Solution Authors
Top Liked Authors
Labels