General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

 

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

jforsythe by Community Team Member
  • 85 Views
  • 0 replies
  • 0 Likes

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 3328 Views
  • 2 replies
  • 14 Likes

Resolved! tcpdump filters

Does anyone know what filters are supported for the tcpdump command on PAN-OS (7.0) ?
For troubelshooting of a Syslog (server) issue, due to large amounts of traffic, I need to capture only packets with syn- or fin/rst-flag set.
Something like this : #

...

Dulle by L2 Linker
  • 14799 Views
  • 7 replies
  • 0 Likes

Statics for DoS Protection

Since DoS protection is for more granular protection of a server, how can i see the statics for the particular server i want to protect.  Wouldn't we need to know the pps statics and sessions for that particular server.

 

raji_toor by L4 Transporter
  • 2017 Views
  • 3 replies
  • 0 Likes

Resolved! Newbie - GP and NAT

1) this is for a home use environment.

 

2) I have successfully configured Global Protect to work external. 

 

3) I have PLex running and need to get it communicating to the world. Was able to do this before GP by setting "Service" to "any" in the NAT ru

...

ckg1999 by L1 Bithead
  • 5327 Views
  • 15 replies
  • 0 Likes

Fail-Thresh scantracker

Hello,

I would like to have information about scantracket pool, and  what mean if you have Fail-Thresh for this process? 

thank you very much in advance

Marivi by L3 Networker
  • 1904 Views
  • 0 replies
  • 1 Likes

Static NAT between virtual routers

Hi,

 

I'm going to migrate a Juniper SRX firewall with a Palo Alto VM-500 firewall.

The case: The Juniper firewall is configured with multiple virtual routers. Between this routers we can static NAT subnets. As showed in the picture below, we have 2 vir

...

Juniper-SRX-VR-Prinsipp.png
JohnOlav by L0 Member
  • 2878 Views
  • 1 replies
  • 0 Likes

Resolved! Forum Location for Education institutes

Greetigns

 

Is there a section of the forum where people involved with education Institutions.

 

I want to get some idea of how and what people allow when dealing with Children in a school when the age ranges from 8 years old up to 17 years old. as well

...

Wykeham by L1 Bithead
  • 2130 Views
  • 2 replies
  • 0 Likes

Log percentage and space

If logging is set to allow up to 95% space on the disk and it hits 95% that same partition,/dev/md6 3.8G 3.2G 454M 88% /opt/panrepo      - PAN-OS Image repository.(Device/Software), resides the PAN OS what happens when you hit 95% on logs and try to

...

jdprovine by L4 Transporter
  • 3074 Views
  • 6 replies
  • 0 Likes

Resolved! Wrong IP calculation after Whitelisting on MineMeld

Hi, 

 

I have installed MineMeld  and it works fine. Before creating our configuration I wanted to test something on Whitelisting as it is going to help on what we are aiming to do with MineMeld.  I hope the below finding is a configuration mistake o

...

StamL by L0 Member
  • 4333 Views
  • 3 replies
  • 0 Likes

Intrazone Rules

Hey guys,

I took over a Palo Alto Firewall and I noticed that there is a intrazone allow rule at the end for every single internal zone.

So source zone: internal zone xy

source address: any

destination zone: internal zone xy

dest address: any

application:

...

MPI-AE by L4 Transporter
  • 3953 Views
  • 6 replies
  • 0 Likes

Resolved! When to use ZoneProfile and DoS Profile

Hello All - Can i understand that Zone Protection Profile is to Protect Firewall itself and DoS Protection Profile is to protect the servers and hosts behind the firewall from Internet?

Can i achieve a DoS protection (For example SYN Flood attack) onl

...

GlobalProtect - Windows 7 Issue

The company I worked for observed an unusual error today with just Windows 7 users of GlobalProtect

Windows 10 & Macos users were unaffected.

 

We use okta verification to allow authentication btw

 

In a nutshell, did some testing in virtual machines runn

...

capita.png
Windows 7 2018-09-13 16-01-38.png
Windows 10 2018-09-13 16-08-02.png
carterg by L2 Linker
  • 9062 Views
  • 3 replies
  • 0 Likes
  • 24125 Posts
  • 100 Subscriptions
Top Solution Authors
Labels