This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Interface IP for Log collector - LC communication

I have configured Interface between 2 m500 with /24 Mask. M500-1----------eth1/5---------------------------------eth1/5---------M500-2 eth1/5 is used for collector communication. Need to confirm this is right design to have IP address on directly connected interface with /24 mask? Please confirm?

MP18 by • Cyber Elite
  • 2328 Views
  • 1 replies
  • 0 Likes

Resolved! Monitor Youtube URL

Hi Everyone, How can we view the exact url (e.g. https://www.youtube.com/watch?v=7o3Pjhs1qxM) of Youtube videos that are viewed by users. We implemented SSL decryption on Youtube site and it shows that it is "Decrypted" but monitoring logs doesn't show any or the exact URL of Youtube video played. Thanks...

nredaj by • L1 Bithead
  • 7270 Views
  • 4 replies
  • 0 Likes

Resolved! Firewall cache for EDLs

Hello Community, I was searching how long can the firewall have cached the EDLs if the firewall lost connectivity to the server where I host the txt file but I dind't find anything. Any clues?Thanks a lot.

Resolved! Monitoring Virtual Systems on Solarwinds

Hi All, Can I monitor my Virtual Systems on Solarwinds - SNMP and Ping? They are configured with shared aggregated interfaces and not indivdual physical interfaces. I am monitoring the device itself but would like visibility of the individual virtual systems. I read an older post that only physical interfaces could be monitored but not sure if t...

a.jones by • L3 Networker
  • 6711 Views
  • 4 replies
  • 0 Likes

global protect: keeping clientless vpn users seperate from remote access (vpn client) users

Here's what I need:Employees using the global protect client, and vendors logging into clientless vpn and getting the apps I assign them.I do not want any vendor to be able to access the vpn client. Here's where I am:I have a GP portal and gateway assigned to the outside interface. Remote access (employees) authenticates to radius server (ACS) a...

Resolved! VRRP on switches connected to PA in active and passive mode

below we have setup https://snag.gy/3kRV8C.jpg Where switches and routers are running ospf.PA has static route to the VRRP IP of the switch. 1>>Need to know is this good design to have the VRRP backup router connected to the PA active switch? 2>>Also yesterday when we reboot the router 1 during that time we lost the internet connec...

MP18 by • Cyber Elite
  • 6056 Views
  • 4 replies
  • 0 Likes

show user group list - Shows custom group only

Under group mappings of LDAP i have so many AD groups. But when i run below command show user group listTotal: 11* : Custom Group IT does not show me any group names from AD?what is the reason for that? Also what is difference between Custom group and AD groups in LDAP?

MP18 by • Cyber Elite
  • 14556 Views
  • 30 replies
  • 0 Likes

Authentication Policy with Captive Portal using Session Cookie

Customer has authentication policy with web-form as authentication profile and 60 minutes timeout.Captive Portal has both timers at 60 minutes and uses Session Cookies with 60 minutes timeout. However if a user hits refresh for the authenticated (https) session less than 60 minutes after succesful authentication he gets prompted to re-authentica...

santonic by • L6 Presenter
  • 6792 Views
  • 4 replies
  • 0 Likes

Resolved! Global Protect issue with BGP routing configuration

Hi All, I have configured Global Protect and I can successfully connect. My Palo Altos are configured to peer and route via BGP which is working without issue. My problem is I cannot reach anything once I am connected. I need at access two address ranges. From the CLI of the Palo I can ping the gateways of the networks I need to reach via the Gl...

a.jones by • L3 Networker
  • 4276 Views
  • 2 replies
  • 0 Likes

Resolved! Basic GP routing/NAT/policy

The Gateway/Portal of my setup works fine.It's routing I think that's not working. I just want a client over GP to hit local networks off the PANOS. IP Pool and access routes that been defined, work just fine .. I can see client has been bestowed these when it connects.. What's the basic setup from a routing perspective ?- I set up a tunnel.## ...

Resolved! Split tunnel greyed out

Hello, We are using PANOS 8.1.7 and GP 4.1.8. We have multi Vsys and one of our VSYS administrator account cannot access GP protect agent split tunnel setup. It is greyed out.Is this an account limit or something wrong?

Screenshot.jpg

threshold values for SNMP Monitoring PA-5250

Hi,How much RAM does a PA-5250 have? And which threshold value should be defined for alarming in SNMP Monitoring?And what other oid make sense to monitor and which hreshold value? e.g. count of Sessions: Data Sheet 8.000.000, but what would be a appropriate threshold value? Thanks a lot Robert

regioiT by • L0 Member
  • 3684 Views
  • 2 replies
  • 0 Likes

Resolved! TS Agent no port mapping when using windows net use

Hey GuysWe have noticed a weird behaviour:When I do a telnet to IP 1.1.1.1 Port 445 on our Terminal Server with the TS Agent installed, the associated Port Range will be used as expected and the source user-id will be mapped.But when we do a net use in the same CMD window, it won't associate it with the expected port range but with a higher, not...

  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks