General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Deploy FW cluter as VPN Concentrators

I am deploying two Palo Alto firewalls as VPN Concentrators, with an HA cluster of Palo firewalls that execute as Perimentral FWs of the network with Internet that are already in production. I would like to know if there is Best Practice for this typ

...

PAN-OS 8.1 RELEASED

FYI,

While PAN-OS 8.1 has been announced for a few weeks, it's now actually available and you can download/install it as you please. 

BPry by Cyber Elite
  • 906 Views
  • 0 replies
  • 2 Likes

LACP with Cisco ACI 3.1

We've noticed that LACP doesn't work consistently and properly for Aggregate Ethernet interfaces between Palo Alto Networks firewalls (all running PAN-OS 8.0.6-h3) and Cisco ACI 3.1 switch hardware.  On the PAN-OS side, I've got LACP set to active mo

...

Resolved! Clientless VPN 404 error

Hi I am experiencing some issues with Clientless VPN feature on 8.0.0.

I get the login page and then I can log in succesfully. I have made an app to web gui of PAN and web gui of my access point.

The only thing that happens is a page with 404 error on

...

PerAnton by L1 Bithead
  • 5476 Views
  • 4 replies
  • 0 Likes

Resolved! Software Question

Tough luck on getting the response to this but here goes, anyone who has a computer repair shop any recommendation on the software to keep track on things?

WillAlt by L1 Bithead
  • 1775 Views
  • 2 replies
  • 0 Likes

Resolved! Export rules in Xcel sheet

Hello,

 

We need to export our FW rules into an excel sheet and then have a column that has a description of what the rule is for and who authorized it, what is the best and faster way of doing it ? 

 

I tried following the link below and tried to export

...

Farzana by L4 Transporter
  • 3105 Views
  • 1 replies
  • 0 Likes

Custom signature for unknown tcp

this is a capture from a tcp traffic.

i want to make a custom app id because in my log it say my application is an unknown-TCP application 

how can i get the signature from the digits (image) ?

can someone thell me or give me tips how i should make a cu

...

20180305_161025.jpg

Debugs available in PAN-OS and their default states

Debugs, what they are for and their default states.

 

I started writing this to refresh a set of scripts. I found most of the debugs and states are not well documented yet. If you know otherwise, please post a comment. I will continue updating this tab

...

bspilde by L4 Transporter
  • 1286 Views
  • 0 replies
  • 0 Likes

VM-100, ESXi, Module 'CPUID' power on failed

Trying to get a VM100 to power on with an ESXi host. 

 

This is a HP EliteDesk 800 G1 i5.  I'm getting the message that Intel VT-x is available but it might be disabled.  However, I know hyper threading is enabled in the HP Bios.

 

Tryig to run Palo 8.0.

...

GlobalProtect Cloud Service maintenance: Mar 6-8

Dear valued Palo Alto Networks customer,


Please be advised that we have a planned service maintenance for the Cloud Services- GlobalProtect Cloud Service infrastructure scheduled from 03/06/2018 4pm PST to 03/08/2018 4pm PST. 

 

We expect the service

...

Zones

Is it possible to use DG layering to solve DaaS Zone issue??

1. Can we create a DG-DaaS whose parent will be ‘DG-AWS_DQA’.
2. Assign Seattle DQT firewall to DG-AWS_DQA
3. Assign Ashburn n future Chicago to DG-DaaS (since it has DG-AWS_DQA as parent, it

...

kpotru by L1 Bithead
  • 1353 Views
  • 3 replies
  • 0 Likes