General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 776 Views
  • 0 replies
  • 0 Likes

Resolved! Install MineMeld behind the proxy server

Having issue to install the MM behind the proxy, the IP address of MM is whitelisted for any proto/url in the proxy configure.

While the installation is started thru the command 

sudo apt-get install minemeld

 I do see the requests from MM is comming t

...

ust_lynt by L0 Member
  • 6793 Views
  • 2 replies
  • 0 Likes

Resolved! Question about url filtering response page

we have configured url filtering where certain categories are blocked and user get the response page.

but under network

interface management profile 

 

the response page is unchecked 

 

need to know how without checking the response page users are getting

...

MP18 by Cyber Elite
  • 2810 Views
  • 1 replies
  • 0 Likes

IP to User mapping Format

Hi !

 

We configured Windows  User Agent for the IP-to-User Mapping to apply the  AD group based policy. User Agent is fine and IP-to-User lookup forwadred to firewall .

 

But the problem in the user format. Some  user's mapped in the format of netbios\u

...

gpsriram by L1 Bithead
  • 2579 Views
  • 1 replies
  • 0 Likes

PAN-88671

Hello,

 

In PANOS 8.0.8 release,  now can disable or enable the L4 checksum checking.

 

How do I check if my 5200 firewall L4 checksum is enabled or disabled?

 

How do I check if traffic is dropped due the L4 checksum?

 

Thanks,

 

E

Resolved! User Activity Report

Hello,

 

I have generated the User Activity report, just wondering whats the count column in the report?

 

Is that the number of time the user has visited the site?

 

Also some category has 2 counts and browser time 0:00:00 what does that mean?

 

Total time

...

Sample.png

Global Protect Client Certificate Issue

Hi team

How can I implement in the Global Protect confuguration the use of client certificate and LDAP authentication as two factor authentication only for some user (or a user group) ? We had only rolled out private certificates from our PKI for some

...

mtsadmin by L1 Bithead
  • 3609 Views
  • 8 replies
  • 0 Likes

Resolved! How to list all configured values for a template?

Is there a way to list all configured values for a given template? I have searched the tech docs and Community but can't find a good answer for this.

 

Background: I inherited a Template Stack in Panorama, and one of the templates has an oddball naming

...

Resolved! Dual Firewall pair-True DMZ design

Hello All,

 

I am looking for any helpful suggestions,recommendations,critics etc for my new firewall design implementation project.

currently, we have a pair of 5020s facing the internet and having DMZs,Internet and Internal networks on them. My manage

...

Resolved! Two question HA

Good Morning

 

I have two questions regarding the HA Fault conditions

When I configure Link Monitoring and Path Monitoring in the Active Firewall Should I also configure these conditions in the same way in the passive Firewall?

 

The "Heartbeats Backup

...

Resolved! O365 URL rewrite

I'm using minemeld to pull the O365 urls into my PAN. I get a list that has entries like
*.domain.com
sub.domain1.com

 

I need to import those entries and rewrite them so they look like
*.domain.com/
domain.com/
*.sub.domain1.com/
sub.domain1.com/

 

Any po

...

ckemp by L2 Linker
  • 14106 Views
  • 25 replies
  • 0 Likes

Resolved! Dropbox Client not working

I have a policy rule to allow dropbox.  I am performing SSL Decryption.  The users are using the dropbox client (not web). I came across this article that mentions this will not work when decrpytion is on

 

https://knowledgebase.paloaltonetworks.com/KC

...

MikeC by L3 Networker
  • 3359 Views
  • 1 replies
  • 0 Likes

Resolved! URL Filter Test A Site page is broken

For about the last week https://urlfiltering.paloaltonetworks.com/ has been broken in way that makes it impossible to submit reclassification requests.

 

I have several sites that I'd like to reclassify, but I have been unable to do so.

When will this b

...

as-mg by L3 Networker
  • 4877 Views
  • 3 replies
  • 0 Likes

PCAP with only source IP Filter and Global counters

 

Hi Everyone,

 

For certian cloud apps we do not know specific destination IP as users have given is list of urls and multiple subnets.

My question is if we do PCAP with only source IP as filter and then do the PCAP and check the global counters for err

...

MP18 by Cyber Elite
  • 1725 Views
  • 1 replies
  • 0 Likes
  • 23985 Posts
  • 115 Subscriptions
Top Solution Authors
Top Liked Authors
Labels