General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 433 Views
  • 0 replies
  • 2 Likes

Re: user-id agent issues

 

 

We are using  windows user-id agent for parsing the user and user group mapping info. often i see in the logs that the user is being not recognized and hitting the deny rule.  after couple of minutes it starts recognizing the user and allows the tr

...

Sanssj by L2 Linker
  • 1897 Views
  • 2 replies
  • 0 Likes

Resolved! Errors in installing Minemeld on Ubuntu 14.04

 

I am trying to install minemeld on ubuntu 14.04. here the steps I did:

I made iptables inactive

I Added and verified successfuly the repo GPG key

I added the minemeld APT repo

I verified that minemled APT is added in /etc/apt/sources.list

 

However

...

Capture.PNG

PAN-SA-2018-0015

Hi guys,

 

Just saw the notice about PAN-SA-2018-0015. Doesn't seem like this vulnerability is a real issue. Am I correct? Or is there a viable way of someone exploiting it?

YoniLeit by L0 Member
  • 3958 Views
  • 2 replies
  • 0 Likes

Resolved! How to generate traffic reports for a specifi interface

Hello Palo experts,

 

I want to create a report which tells me what bandwidth has been used on an outside interface, for say the past month. Something that can display the average bandwidth being used during a day would be good. I see on my PA-3050 tha

...

rchung54 by L2 Linker
  • 16660 Views
  • 4 replies
  • 0 Likes

Deleting Panorama templates

Hi, A firewall has been configured with a template from Panorama, the template was then deleted from Panorama.

Can i safely remove the template from the firewall without deleting the config applied through the template?

Add device in Panorama

Hi,

 

We are trying to add a devices in Panorama. We have checked the conectivity FW-> in port 3978. We can see the packet running tcpdump in Panorama about packets comming from FW.

 

so connectivity is OK. Everything looks ok. And we have another FWs in

...

Panora.JPG
BigPalo by L4 Transporter
  • 1644 Views
  • 2 replies
  • 0 Likes

Resolved! What is the value of a Backup Peer HA1 IP Address?

In some of our firewalls I note a secondary IP address is assigned to a single HA group ID. 

What is the value of having this second IP? The problem it's introducing is that SNMP Traps

are getting gerated once or twice a day noting that the secondary I

...

Can Pan-os take action base on rules, condition or report?

Hi.

I have a question about a scenario. Can Pan-OS/Firewall detected a infected host/client pc and take the following action.

Blocking internett access from the infected hosts/client pc and move the infected host to a another security zone?

OR

Just move

...

tonyle by L0 Member
  • 1755 Views
  • 2 replies
  • 0 Likes

SSL Certificate Profiles - PANOS External Dynamic Lists

I'm running into an issue with external dynamic list threat feeds while using panos 8, the problem being is it seems they introduced a great feature to validate and authentication SSL sources by validating the signing CA for the threat feeds that can

...

RTECIT by L0 Member
  • 2957 Views
  • 4 replies
  • 1 Likes

DNS "Aged Out"

ISP changed fiber line coming into site.  DNS server addresses did not change (they say) but the external addresses and gateway did change. 
 
I can connect to the internet but just for about 2 to 3 minutes and then I lose access to the internet.
 
Updat
...

Panorama - Object

Hello

 

I start the Panorama configuration and I created Device Group. My device group are based on our site location :

 

FR

  - Paris

  - Toulouse

 

I would like to know the best way for the configuration. If I create objects in Paris DG (object to define P

...

Resolved! New template stacks after upgrade?

Hi all,

 

I upgraded from an 8.0 release to 8.1.3 to prepare for a migration to some new hardware.  I did a commit after the upgrade to make sure everything was synced up between Panorama and the firewalls and I believe everything went ok.

 

I was making

...

jsalmans by L4 Transporter
  • 5737 Views
  • 5 replies
  • 0 Likes

Resolved! 15 cpu cores in 5220

Hi everyone,

 

Need to know the cores from 0 to 15 as shown below does it mean that 5220 has 16 dedicated CPU including number zero?

And all these cores are used by the DP only?

 

 

 

show running resource-monitor

Resource monitoring sampling data (per secon

...

MP18 by Cyber Elite
  • 3306 Views
  • 3 replies
  • 0 Likes
  • 23698 Posts
  • 110 Subscriptions
Top Solution Authors
Labels