This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Support for eliptic curve x25519 for inbound SSL decryption?

On PAN-OS 8.1.2 I'm getting decrypt-errors when decrypting inbound traffic. I ran a test using SSLabs.com, and I found that newer browsers are requesting x25519 and getting a handshake error. It's showing that only secp256r1 are secp384r1 are supported. Does 8.1 support x25519 or plan to support it?

Maxstr by • L3 Networker
  • 5026 Views
  • 3 replies
  • 0 Likes

Increase Panorama logging

I currently have a virtual Panorama on esxi running version 8.1.x in legacy mode. The VM is configured with a system disk and an additional 500GB disk for logging. The 500GB is proving to be not enough as I'm only able to keep a little of 1 month of logs. I have asked this question to support, but could not really get a clear answer. Is it pos...

MikeC by • L3 Networker
  • 5196 Views
  • 5 replies
  • 0 Likes

Resolved! Allow inbound concetion to multiple servers from single public ip

We have vendor device with public ip in internet.IT need to talk to multiple servers inside the company network. all the internal servers have private ip and connection need to come on different port numbers. Currently I am allowing the incoming connection from vendor to one of our public ip address and using static nat translation for destinati...

MP18 by • Cyber Elite
  • 7420 Views
  • 3 replies
  • 0 Likes

Test vlan network for rsa secureid

Hi all, I have project where I need to have a test vlan in my pan820 that will intergrate with Secureid authentication manager 8.4, my plan is to have this test vlan separate from the inside network, and also from globalprotect, we will be putting pc's in this test network where when they login, it will trigger the mfa authentication. So what wo...

cdcirexx by • L3 Networker
  • 4761 Views
  • 4 replies
  • 0 Likes

Resolved! Global Protect + Captive Portals + Enforce GP for Network Access = Bad User Experience

Hi community Do you maybe also use Global Protect with the setting "Enforce GlobalProtect for Network Access" enabled? And does this also made you a headache? Even worse do you have https website configured on the client computers as default websites in the browsers? If if this is not enough does this website also use HSTS? By default a modern o...

Remo by • L7 Applicator
  • 8155 Views
  • 3 replies
  • 5 Likes

Resolved! Connection from outside to Inside Server

We have specific device that has public IP and need to connect to Server inside our networkThat server has private IP address and that address is not in any physical interfaces of the firewall. Need to know how can I allow the connection from this specific Public IP to the server private IP?

MP18 by • Cyber Elite
  • 6078 Views
  • 4 replies
  • 0 Likes

Resolved! Out of disk space

Hoping someone can help me. I have a PA-200 which has run out space in the root filesystem. admin@f-lonftz-pawireless2> show system disk-space Filesystem Size Used Avail Use% Mounted on/dev/sda2 1.9G 1.8G 0 100% //dev/sda5 6.6G 3.9G 2.4G 63% /opt/pancfg/dev/sda6 1.9G 1.1G 778M 58% /...

Panorama and active/active configurations

Hi, Recently, we added more PA devices to our infrastructure and we decided to start using Panorma to manage all these devices.So far, we haven't experienced an improvement in efficiency or user/admin friendliness. Let me (try to) explain:We have two firewalls who are configured as an active/active setup. (No panorma yet).These firewalls had to ...

mvdven by • L1 Bithead
  • 2734 Views
  • 1 replies
  • 0 Likes

Certificate attached to non existant security profile

Hello, I've encoutered a problem regarding the deletion of a Certificate. When i try to delete it i get the following error message:1- Failed to delete certificate - xyz xyz cannot be deleted because of references from: ssl-tls-service-profile -> xyz-ssl-tls-service-profile -> certificateWhen i travel to the SSL/TLS Service Profile...

steven.m by • L0 Member
  • 3436 Views
  • 1 replies
  • 0 Likes
  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks