General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 2182 Views
  • 0 replies
  • 0 Likes

Static Route monitoring and NAT

I'm having an issue with my NAT policy. 
I've configured a backup ISP connection with a static route and a higher metric. When the primary ISP connection fails the routing portion works correctly and I can see the primary default route get removed fro

...

Modo2016 by L1 Bithead
  • 2817 Views
  • 2 replies
  • 0 Likes

Change interface virtual router cause network down

My network has 2 outgoing data lines. Using one virtual router and set static default route for the 2 interfaces. The 1st interface has its Metric set to higher priority. As I want to divide the traffic. Some zones were force to use the 2nd interface

...

jeremylo by L3 Networker
  • 3529 Views
  • 3 replies
  • 0 Likes

Force to Use Certificate

Dear Friends !

as i study PAN 7.0 if there is no Certificate installed in Client PC, PAN can not read https secure sites

in this is if i block youtube or other social websites and client uninstall CA from its browser he/she will be able to open blocked

...

Blocked WebSites

Dear Friends !

 

i am using PAN 7.0 and blocked some secure websites, but PAN is not able to block websites by name

for exmaple when i access 53.55.125.73 it is blocked succesfully but when i type https://www.mydomain.com Certificate is verfying by PAN

...

Upgrade 3020 to new version?

Hey guys,

There are two 3020s in HA that run 8.0.7

I'm wondering if I can upgrade to a new version in 8.1.X train? Or should I stay at 8.0.7?

 

Can someone share their experiences?

 

Thank you.

MPI-AE by L4 Transporter
  • 5335 Views
  • 10 replies
  • 0 Likes

Resolved! GlobalProtect when Palo behind ASA

Hi All

 

I've been tasked with getting GP working and as I'm not as skilled as many of you, I thought I'd ask the brains trust if this is possible.

We have a PA-3020 which sits behind a Cisco ASA. The ASA is the edge firewall and is a yes/no gateway, th

...

Log Forwarding / Dynamic Address List

Hi,

 

We are trying to use the cool new "built-in actions" / tagging feature available through Log Forwarding to tag source IP addresses that generate high/critical threat events to build a dynamic address list that will ultimately be used in a policy

...

SARowe_NZ by L3 Networker
  • 3385 Views
  • 2 replies
  • 0 Likes

VM-100 on VMware Worksataion 15

Hi there,

I have no issues spining up new VM-100s in my VMware Workstation 15.0.2, however, when I try to add a third vNIC to the VM, the VM will not boot any longer. I get an error on the CLI (VM console) indicating that the configuration is not supp

...

incorrect browse time-user activity report

I have a question regarding reporting.

When I generate user activity report, it is showing me browse times inaccurately. I have logging at the end of the session. if I enable log at start, will I address the issue?

 

TIA>

NAT translation help

For the life of me I can't figure out something that should be simple. I'm having a problem with a nat translation setup. Here is the requirement:

 

I have various computers/devices on several IP addresses and different subinterfaces, for example:

 

Devi

...

NAT Rule.png
GIT_Sean by L1 Bithead
  • 2879 Views
  • 3 replies
  • 0 Likes

Reg Case _reg 01075000

Hi Team , 

 

I have a problem with connecting paloalto with minemeld via EDL, i have installed the minemeld according to documentation and the certificate with the feed user. The result is the next: 

2019-02-06 12:03:42.234 -0500 EDLRefresh job starte

...

alal by L2 Linker
  • 5305 Views
  • 3 replies
  • 0 Likes
  • 24253 Posts
  • 119 Subscriptions
Top Solution Authors
Top Liked Authors
Labels