This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Issue displaying globalprotect window with certain monitor configurations under linux

There seems to be an issue displaying the globalprotect window in Linux with certain monitor configurations. I have a small primary monitor and a large secondary monitor, placed like this: The globalprotect window tries to display in the bottom right corner of the total monitor area and is offscreen to the right of monitor 1 and completely inacc...

image.jpg
image.jpg
bungle by • L0 Member
  • 1082 Views
  • 1 replies
  • 0 Likes

Resolved! TLS handshake error when using my IPsec tunnel

I have an IPsec tunnel set up between two PAs. Everything showing green and I can ping between the two networks. My problem is that whenever I try to access a Docker container over TLS through the tunnel I receive a TLS handshake error, connection reset by peer. I have tried a variety of fixes including changing the Docker network settings and l...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 1345 Views
  • 0 replies
  • 0 Likes

Resolved! NAT Question

I have a question about the PA NATing. I have 8 different internal zones within my test lab. Each zone is either assigned to a physical interface or a sub-interface. Would I need a separate NAT rule for each zone to be routed to my egress port (WAN) port? Looking to keep everything neat and simple. Lastly, if that NAT traffic is coming back int...

Resolved! Issue to send security policy forwarding log by email

Hello everyone, I have created a security policy that logs only IPv6 traffic, and I added a log forwarding profile to ensure I receive an email whenever the policy is triggered. However, the issue is that when I send IPv6 packets, I don’t receive any emails. My email server profile is working fine. When I test the connection, I receive the t...

PA 445 ZTP

Hi Team, I am planning to configure the new firewall using ZTP and also planning to manage this firewall completely via SCM. Add a ZTP Firewall to Strata Cloud Manager Following the above link to add teh ZTP FW to SCM. > Need to know where will i get the Claim Key? Here it asks for both Serial No and Claim Key. > If i activate the licenses...

Resolved! Is it possible to generate "email" alert when any user reaches the defined bandwidth threshold?

Hi All,Is it possible to generate "email" alert when any user reaches the defined bandwidth threshold?Eg: Defined bandwidth threshold is 1 MB, if any user reach or exceeds the defined bandwidth threshold then the device should trigger a email alert to administrator. Note : I don't want to restrict any user to 1MB, but need onle alert if he excee...

Gururaj by • L4 Transporter
  • 4044 Views
  • 2 replies
  • 0 Likes

CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?

CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?I have 8 anti-spyware profiles across about 10 HA Pairs - 2 predefined and 6 custom. All in "Shared", not a DG. Any references that would be able to be in a template are likely in a template.It seems to me that until I can get my departments to give me upgrade windows I should s...

Traffic on udp/3478 (STUN) is been classified as 'unknown-udp' for MS-Teams app

Hello, Most of our users are running Teams in a Office 365 on Windows laptops, from a network perspective it is just a connection on different ports to random hosts within 52.0.0.0/8 subnet. The problem we have is with udp/3478 port, some portion of it is STUN, some been identified as MS-TEAMS-AUDIO-VIDEO with latest app-ids. As mentioned i...

Resolved! Websites stopped working after update

Hello, We have updated 10.2.6-h3 to 10.2.8-h3 earlier and recently to 10.2.10-h9 but in both times we had to do rollback to 10.2.6-h3 because our websites stopped working. Everything else seemed to work except inbound traffic to these applications. Traffic totally stopped. Not even one hit in traffic log after update. Have you seen anything ...

ToniE by • L2 Linker
  • 1992 Views
  • 3 replies
  • 0 Likes

PA equivalent of ASA packet tracer?

One of the more useful features in troubleshooting on the PIX/ASA (which we used until recently) is the packet tracer, which allows us to enter source/destination IP/port, etc and check to see if a given connection is allowed or blocked, and by which rule. Is there an equivalent feature in the PA units?

HA-Palo Alto with 2-Diffrent ISP

Dear Community i have 2-PA configured as HA and need to be redundant for ISP,so i have interface from ISP-A and another one from ISP-B, and from internal service i have VM server that needs only one IP statically work with NAT and 2-Vsys,and using static route for routing, my question is how I can make some change so I can make redundant for th...

  • 24412 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks