General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Resolved! Single Sign on configuration

HI every one ,

any one help me to configure signle sign on in palo alto . as per my expirence we use to have agent in fortinet for sso. but in palo alto, i never configure SSO before and i,m not able to find any SSO Step by step,

We have Active dir

...

Resolved! Commit Failed and Unable to Restart Device and Management Server

On PA 200 running 8.0 unable to commit it shows failed.

Running and candidate config is syn.

1>>Did Commit Force no luck

2>>During Commit ran the below command it state of init does not change

show management-clients

Client PRI State Progress
--------

...

Resolved! PA to Cisco ASA Site to Site IPSEC with source as user id instead of IP address

Need to know is it possible to use Site to Site IPSEC with Cisco ASA and use USer id instead of source address in the Palo Alto?

What we want is instead of source IP address we can config the user id.

Resolved! No Traffic Logs in CLI and Gui

No traffic logs in cli and gui

last log i see is midnight 2AM MST

debug log-receiver stats all logs incremented

tail mp-log logrcvr.log shows

2019-02-01 02:58:42.332 -0700 Error: _write_task_disk_flush_process(pan_logdb_writer.c:1501): Error executi

...

What is current PAN OS version is target or recommended

Please recommend

Dear all,

Can you recommend to use 200 users for PA firewall? What kind of firewall we should use for 200 users?

Best regrets,

Cardi Moe

Resolved! Failover PPPoE Connections

We have PA-200s and 220s that we provide to our branches that have their own internal range that gets advertised into our network through global protect. They all have their own internet connection but if that goes down then we have no redundancy in

...

Resolved! URL Filtering with Any Any

Hello all,

We are preparing a firewall in which the first security rule has to be :

Source and Destination: ANY

From TRUST Zone to INTERNET Zone.

Application and Service: Any

And then there is a URL Filtering profile attached to the rule.

So will this r

...

Does PANOS is impacted by DNS Flag day ?

Hello community,

Do you know if PANOS is impacted by DNS flag day ? I know CheckPoint and Juniper SRX are impacted by this change DNS config. But I do not see any info provided by Palo alto about that.

Best Regards

Andres P.

Suggestion for Panorama update

Within Panorama, while managing client firewalls, routinely the customer wants some variation of the built-in URL category restrictions. While it is great to have so many categories and for the most part they are well apportioned. However, to get aro

...

Resolved! How to know when a PAN-OS version is target or recommended?

Hi,

I want to know if PaloAlto have a link for know when a PAN-OS version is cataloged as target or recommended.

For example, 8.0.9 is target? or 8.1.1?

Thanks,

AROMERO

Panorama Dynamic Updates SSL Connect Error

After upgrading some of our firewall and Panorama to PAN OS 8.x, we cannot push out dynamic updates from Panorama anymore. We are still able to push out dynamic updates to firewalls running anything below PAN OS 8.x, but nothing within the PAN OS 8.

...

User-ID: Require some guidance on best architecture for UserID deployment

Hi everyone.

We currently have a small rollout of UserID across 2 of our firewalls across 2 sites. I think there are some gaps in performance and redundancy and I'd like people's opinions about the best way to deploy UserID.

Bit of background about ou

...

URL Filteting question

We received an alert about the behavior of the virus.

The malicious loader is downloaded from the URL of compromised legitimate sites, where it is disguised as an image.
The URL by which the malicious loader is hosted, all addresses end with the strin

...

Passive Node not showing recent config

Hello,

We have a cluster of two palo alto 850, the passive node is not syncing config with the active node despite dashboard claiming they are in sync. Pushing the config from panorama is successful however the passive node does not show the most rec

...

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free