This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4119 Views
  • 0 replies
  • 0 Likes

Resolved! PA3050 cant ping next hop and has dropped all client traffic heading outbound.

I have tried a lot, and at this point I think I just must be missing something obvious that for whatever reason wont come to mind. From the PA3050 I can not ping outbound from the public IP. When I run captures, all outbound traffic is in dropped stage. There is no network functionality at all, and I am unable to find the issue. Security ConfigN...

tmp.PNG
tmp2.PNG
lschs-s by • L2 Linker
  • 16313 Views
  • 19 replies
  • 0 Likes

URL filtering issue

Good day,I have such kind of issue after PAN update to 9 version.Here are 5 allow categories, pre-defined categories (low-risk, medium-risk, high-risk and newly-registered-domains), which I want to make alert. But after change, all of categories became allow.Have any of you faced this kind of situation?Thanks in advance.

Screenshot_1.jpg

SSL version logging

Is it possible to log the version of ssl/tls being used for decrypted sessions (inbound ssl inspection in particular)? I know we can control what versions are used in the decryption profile but is there any way to identify the specific ssl versions being used in sessions without doing a full pcap? We were looking for a way to do this in mass.

mpochan by • L0 Member
  • 3733 Views
  • 1 replies
  • 0 Likes

EDL HTTP response code said error

Hello Community,I have posted this question before, and was told that it is a server error, I have replaced the server but with the same error, so I thought I would post it again, could it be somthing wrong with the server configuration, or could it be a bug.I am facing an issue where the External Dynamic List shows an error when tested by cli c...

Need suggestion for 2 x internet data line network design

The office has 2 internet data line. Each of them has a fix public IP address. Device is a PA-820.I want to separate the utilization of the data line as below. 1. Office area/staff primary use 1st data line. If this line down then auto change to use 2nd data line. When 1st data line resume. Auto change back.2. Guest area always use 2nd data line...

jeremylo by • L3 Networker
  • 4450 Views
  • 5 replies
  • 0 Likes

Resolved! Suspended HA partner becomes active

We are in the process of setting up HA between two PA-5050 running PANOS 6.1.14. After configuring everything and testing failover in our main data center we performed "Suspend local device" on the passive node and shut it down to move it to our secondary site. After it was moved there and powered on we started to connect the various interfaces....

Resolved! Why Destination NAT has no option for Bi Directional?

Need to understand when we do destination nat why there is no option for bidirectional ? For destination nat the return traffic comes without bi directional option not available due to the PA being stateful and matchingthe session?

MP18 by • Cyber Elite
  • 3206 Views
  • 2 replies
  • 0 Likes

Resolved! O365 sub-applications

Currently, our palo alto only detects the following O365 applications*ms-office365*outlook-web-online*sharepoint-online*ms-office365-base*ms-teams*ms-lync-online Do we need to enable SSL decryption so that it can detect other sub-applications? (ms-downloading, ms-uploading, ms-posting, etc.)

blocking yahoo.com advertisements

So yahoo.com has some new, annoying advertisements that are behind/beside the web content. Our PA-3060 with PanOS 8.1.4 is not blocking these AD's. Anyone have advice on getting these blocked? yahoo ad

yahoo ad.jpg
Jwaayers by • L0 Member
  • 2901 Views
  • 1 replies
  • 0 Likes

Resolved! Update Path for User ID Agent

I need to update our User ID Agent from 7.0.0-23 to 8.1.7-5 or 9.0.1-5. Do I need to follow an upgrade path or can I just go directly to the version needed for the User ID Agent? Thanks in advance.

Resolved! SSL inspection with Java applications

I have found that Java appears to use it's own certificate store which is causing me grief. Work around is to install our root CA within the Java control panel but this is not efficient for a large organization. Has anyone found a way to push root CA's to Java through GPO's or make Java use the Windows certificate store using GPO's? We have a ...

DIRTT by • L2 Linker
  • 7286 Views
  • 3 replies
  • 0 Likes

extending vlan

Hi, I have two pa device , if . Both are in two differnet site . and I want to access the device in vlan10 from one site to another . How can i do that . vlan 10 ----fw1 --------------fw2---vlan 10 Thanks

simsim by • L4 Transporter
  • 10681 Views
  • 13 replies
  • 0 Likes

Static route path monitoring

Hi All, We have PA-820 models with Active-Passive configuration. I have configured the static route path monitoring based on this guideline - https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/networking/static-routes/static-route-removal-based-on-path-monitoring.html Just would like to know, would there any impact in removing the stat...

ChiragP by • L2 Linker
  • 6282 Views
  • 2 replies
  • 0 Likes

Problem with SIP traffic

Hello there! I have a problem with SIP traffic for VoIP. It is a HA cluster that has experienced that problem with the SIP traffic for phone calls. For a number of hours, SIP calls could not be made or received. Mismatches with the config between active and passive firewalls were found. Could that have been the cause for the problem with SIP tra...

  • 24336 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks