This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

New to Palo Alto from Juniper SSG

I was wondering if someone could enlighten me on how to replicate the Mapped IP functionality from Juniper SSG to Palo Alto.We have a number of services on our current Juniper SSG. The way we firewall these services is using MIP's on the Untrust Zone then the traffic passing from Untrust to Trust using standard juniper policies. I was playing ...

Resolved! PA support SVTI

Hi @reaper Do palo alto support SVTI like Cisco.SVTI configurations can be used for site-to-site connectivity in which a tunnel provides always-on access between two sites. The advantage of using SVTIs as opposed to crypto map configurations is that users can enable dynamic routing protocols on the tunnel interface without the extra 4 bytes req...

Resolved! Mac OSX HIP check based on processes

I've recently turned on HIP profiles for our windows users, checking to see if our patch management and AV is running by looking at processes. I need to do the same thing for some of our Mac users, but I'm striking out. What is the best way to verify something running as a process via globalprotect on a Mac?

Antivirus/Anti-Spyware Response Page not working

Hey Community! I noticed that our Firewall (PA-3020, PAN-OS 7.1.6) does not serve an Antivirus/Anti-Spyware block page.When I use http://www.eicar.org/85-0-Download.html to test it, I can see that it is blocked.ThreatLog shows action "reset-both" but in the Browser (tested with Firefox 50.1.0 and IE 11 11.576.14393.0/Win10) I don´t get the desir...

Resolved! 8.1.5 BGP question

Hi I have some inserted routes into my BGP for redistribution.firstly I have a NAT address associated with a loopback. I had a redis rule saying connected and added in the interface. That didn't add the ip address into the BGP tables, tried just the /32 that didn't work either ! so I went into the router and bgp and redist rules an added in /32 ...

Support for eliptic curve x25519 for inbound SSL decryption?

On PAN-OS 8.1.2 I'm getting decrypt-errors when decrypting inbound traffic. I ran a test using SSLabs.com, and I found that newer browsers are requesting x25519 and getting a handshake error. It's showing that only secp256r1 are secp384r1 are supported. Does 8.1 support x25519 or plan to support it?

Maxstr by • L3 Networker
  • 5056 Views
  • 3 replies
  • 0 Likes

Increase Panorama logging

I currently have a virtual Panorama on esxi running version 8.1.x in legacy mode. The VM is configured with a system disk and an additional 500GB disk for logging. The 500GB is proving to be not enough as I'm only able to keep a little of 1 month of logs. I have asked this question to support, but could not really get a clear answer. Is it pos...

MikeC by • L3 Networker
  • 5240 Views
  • 5 replies
  • 0 Likes

Resolved! Allow inbound concetion to multiple servers from single public ip

We have vendor device with public ip in internet.IT need to talk to multiple servers inside the company network. all the internal servers have private ip and connection need to come on different port numbers. Currently I am allowing the incoming connection from vendor to one of our public ip address and using static nat translation for destinati...

MP18 by • Cyber Elite
  • 7461 Views
  • 3 replies
  • 0 Likes

Test vlan network for rsa secureid

Hi all, I have project where I need to have a test vlan in my pan820 that will intergrate with Secureid authentication manager 8.4, my plan is to have this test vlan separate from the inside network, and also from globalprotect, we will be putting pc's in this test network where when they login, it will trigger the mfa authentication. So what wo...

cdcirexx by • L3 Networker
  • 4801 Views
  • 4 replies
  • 0 Likes

Resolved! Global Protect + Captive Portals + Enforce GP for Network Access = Bad User Experience

Hi community Do you maybe also use Global Protect with the setting "Enforce GlobalProtect for Network Access" enabled? And does this also made you a headache? Even worse do you have https website configured on the client computers as default websites in the browsers? If if this is not enough does this website also use HSTS? By default a modern o...

Remo by • L7 Applicator
  • 8226 Views
  • 3 replies
  • 5 Likes

Resolved! Connection from outside to Inside Server

We have specific device that has public IP and need to connect to Server inside our networkThat server has private IP address and that address is not in any physical interfaces of the firewall. Need to know how can I allow the connection from this specific Public IP to the server private IP?

MP18 by • Cyber Elite
  • 6113 Views
  • 4 replies
  • 0 Likes
  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks