This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Passive node with errors to the Paloalto cloud.

Hello, Scenario:VM300 ClusterActive-passiveVersion 10.2.12-h9Since a few days ago, I have detected that the passive FW has the following alerts: I have checked and the licenses and security policies are correct. Can someone help me? Regards

Alpalo_0-1738310196154.png
Alpalo by • L4 Transporter
  • 1307 Views
  • 3 replies
  • 0 Likes

Retirement of RBAC Application Impersonation

Seeking information on the retirement of RBAC Application Impersonation. We've found the documentation with the PS command to run in Exchange Online. Are there any other steps associated with this that we need to take? Currently we're using the EWS O365 Integration. Should we switch to the "Microsoft Graph Mail" integration?

olivac by • L0 Member
  • 828 Views
  • 1 replies
  • 0 Likes

Alert from AIOPs that one of our Log Collectors has left the Collector Group in Panorama.

Hi I got an alert from AIOPs that one of our Log Collectors has left the Collector Group in Panorama. But after we checked in Panorama both Log Collectors are still in the Collector Group.1. Why does the alert from AIOPs state that one of the Log Collectors is disconnected?2. is it because of configure in a non-redundant mode? if so, this con...

Resolved! Tags for Managed Devices vs. Object Tags

I know how to create and manage Object Tags; under Device Group > Objects > Tags. What I can't seem to find is how to manage the tags that get applied to the managed devices under Panorama > Managed Devices > Summary. I know I'm probably missing something obvious, but a point in the right direction would be helpful.

jwill2 by • L2 Linker
  • 1926 Views
  • 1 replies
  • 0 Likes

GlobalProtect license in HA

Hi we bought PAN-PA-1410-GP-HA license an I would like to know what this license for is it for both 2 firewalls in HA actve passive , how to activate it only on active firewall or passive firewall as well

mhmameen by • L1 Bithead
  • 1119 Views
  • 2 replies
  • 0 Likes

Prisma - ClipChamp

Hi all, I have an issue where I cannot sign into the ClipChamp application when connected to Global Protect - the web version is fine. Something must be blocking it, but I can't find anything in the logs. I do see some traffic being allowed, but the end session reason is 'policy-deny' - what is this policy!? I'm not entirely sure this is related...

HTTPS Access Issue

I cannot access our Palo Alto device through HTTPS, although I can still access it via SSH without any issues.After investigation, I found that the certificate was expired. Why did it work after restarting management plane from cli prior to changing the expired certificate then ?

T.Galal by • L0 Member
  • 812 Views
  • 1 replies
  • 0 Likes

GP issue with IOS device

We are facing issue with connectivity using GP in I Phone devices. We are getting the below error.gateway apple T the network connection is unreachable or the gateway is responsive check the network connection and reconnectWe tried installing new set of certificate with pkcs format on iPhone yet it is not working.We checked the Monitor log where...

Evaluation Licenses

I have Palo-Alto Firewalls and Panorama installed via KVM on eve-ng. I am utilising these systems for exam preparation. I require the eval licenses so I can utilise Panorama correctly. Can someone let me know how I can get the eval licenses without being a partner etc?

Clarification on App Rule - I thought I understood this

I recently moved a firewall into being managed by Panorama. I setup an Application rule specifying the application as PANORAMA which includes the ports necessary (I assumed) for Panorama communications but the firewall could not be added successfully until I allowed port 3978 traffic. The logs showed 3978 being recognized as SSL initially and...

TonyDeHart by • L4 Transporter
  • 12730 Views
  • 22 replies
  • 1 Likes

PA-VM MGT not reachable in GCP.

I have PA-VM deployed in GCP with SD-WAN. PA-VM sits behind SD-WAN for intranet traffic.attached image is how my setup looks like . Query. I can't reach firewall mgmt via internal network (access via Public IP to mgt Public works fine) . everything on private interface (Eth1/1) works fine.We have return routing in place for MGT subnet in GCP rou...

Nischal by • L2 Linker
  • 1802 Views
  • 3 replies
  • 0 Likes

Resolved! Error in commit after upgrade to 10.1.5-h1

After upgrade from a PA850 from 10.1.5 to 10.1.5-h1 in the end of last week we no longer can commit new configs 😞It gives the following error when we try to commit.Validation Error:rulebase -> security -> rules -> Block xxx -> hip-profiles unexpected hererulebase -> security -> rules is invalidWe've reverted to running config,...

Customer Portal error issue

I need to get licenses from the customer portal page under "Assets". However, I cannot as I keep getting an error on the page and only have "home" and "resources" as options in the left hand menu options. Is there a problem with the portal or is it something else?

cagwyther_0-1738167127357.png

Resolved! Application change port/protocol change request

I am Boundary Technician with the US AF, and currently TBS with a customer who are attempting to est. a tunnel with the following applications: wireguard and zerotier. The tunnels are not coming ups for some reason. Both applications are using the dynamic-udp as a standard port. Question, how to I request a port research / change for the two ...

Upgrading panorama questions

Some real easy questions. We want to upgrade our M-200, so in software platforms, I want the m type, correct? Also, can I safely ignore built in plugins? they don't need to be upgraded separately, correct? thank you

  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks