This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! how to unblock this sub-url?

I have a URL filtering list with *.github.com in custom blocklist. but I want to allow one specific sub-url https://github.com/abc .added the sub-url to the custome allow list but didn't work. I'm assuming because of the url filtering order of preference(i.e blockl list first).how can I get this working without creating another security policy? ...

change standalone node to HA

I have Standalone PA 3020 up and running , is being manged by Panorama and now I need to add another PA 3020 to bring in High Availability.Please help me with the steps that I should follow. In Panorama We have template stack and Device group for already running standalone PA 3020.Should I configure HA setting on both firewall and simply push th...

GTP & SCTP Protection

Can someone in this forum tell me about GTP & SCTP Protection features? Is there any deployment reference for GTP & SCTP feature?Can we only inspect GTP-C (Control Plane) only?

Resolved! Polling Error with Miner

Hello I was wondering, I was trying to fix one of my miners that the URL seems non-existant. The URL is from Palo Alto : https://minemeld-updates.panw.io/deprecated-feed.txtI was wondering if any of you found the new URL to which it could be moved, I checked feodottracker but they are only providing me with IP feed and MD5 feed while I'm looking...

image.png

Client Authentication Sequence only works for 1st item in the list

I configured Client Authentication Sequence for both GlobalProtect Portal and Gateway for both LDAP and local database. For some reason, only the first item in the list works. It does not seem to try the rest of the sequences in the list. If LDAP is first in the list, then LDAP authentication works but not Local database. If Local databse is...

rhap4boy by • L1 Bithead
  • 4725 Views
  • 4 replies
  • 0 Likes

Minemeld Installation OVA + ISO : LiveCD or removable?

Hi everyone, I want to install Minemeld following the official tutorial [1] that uses an Ubuntu OVA + MineMeld ISO that installs the software during the first boot. My question is if that ISO can be removed after first boot and the consecuent installation, or it's a LiveCD that needs to be plugged in all time. Something like the following proces...

Azure Datacenter IP Dynamic List Issues

Hi all, We have the azure_cloudIPS miner, processor and outpur working and can view the list of IPs via the link (https://minemeld.mycomp.com/feeds/AZ_DC_IPS). We have simplar feeds setup of Office365. However, the on teh PaloAlto, the dynamic list is empty). Test URL Source is successful, and the Office365 feed populates just fine. There...

DIzzard by • L0 Member
  • 2885 Views
  • 1 replies
  • 0 Likes

Advise on using AD user-id in local PA groups?

I am struggling with utilizing ActiveDirectory groups in firewall policy. My concern is then our AD administrators have control over transversing our firewall policy. Generally speaking say for example we have a FW policy setup where AD group ServerAdmins has <some type of> to a resource, they (the AD administrator) could very easily throw...

zthiel by • L2 Linker
  • 3699 Views
  • 3 replies
  • 0 Likes

Resolved! New GP deployment - DNS, ping, and tracert work, but no app traffic

I've set up a new GP config on a new PA-820 firewall. I have an old firewall I'm replacing, but I'm running them side by side. On the new 820 GP, I can connect with a GP client, and then ping internal servers. I can verify that DNS is working with nslookup using our internal DNS servers and all of the internal resources resolve and can be pinged...

Resolved! User-ID Proof Of Concept - With Proxy

Good afternoon Team, Pardon my stupidity here. I'm running a PoC at the minute and customer is keen on the User-ID aspect. However, the have most of their users behind a proxy. We have configured the PoC in standard TAP, with LDAP server profile etc etc. We are picking up users in logs from AD but I'm wondering if there is a way to see users beh...

One to one NAT mapping for many to many

Sonicwalls have a setting that allow a /24 subnet being natted to a different /24 subnet to get mapped on a one to one basis. Example, 192.168.1.10 will get bidirectionally natted to 10.0.0.10, 192.168.1.11 will get bidirectionally natted to 10.0.0.11, etc... The last octet will always stay the same which allows one nat rule to be added so both...

  • 24412 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks