This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

User ID for ncomputing environment

HI all,My customer has ncomputing (thin client) environment and all servers are Ubuntu. They wanted to implement User-ID feature in this environment. As we do not have any User ID agent for Linux, how can we get user info? Can we use Captive portal, will that work per session?Thanks,Abhijeet

DNS Security Subscription on EXISTING PA-220 Lab Appliance

Is anyone having the same problem as me? I have an existing PA-220 lab appliance (the lab SKU includes all available subs and support) that was deployed prior to the announcement of PAN-OS 9.0 and DNS Securty. I have since upgraded the appliance to 9.0, but I cannot find a way to add the DNS Security subscription to the appliance within the su...

Resolved! Is there a way to disable specific traps in PAN?

I have a long open issue with PAN TAC where the PAN 5060 is sending traps when detecting an issue with HA secondary availability. The HA is fine so these messages are just spam for practical purposes. Is there a means to disable these specific traps?

Publishing website issue.

Hi Experts,I am trying to publish a website, the webserver is behnid my Palo alto, i created NAT rule from public IP to be natted to the internal webserver IP address. What is starnge here is that i am not able to see my traffic when trying to reach the website from external. I was testing from my mobile so i put in Montior traffic tab source is...

PLEASE HELP.. same config but not working! from PA 3050 to PA 3220

Dear experts, I am moving from PA3050 to PA3220. I did export the current configurations from the old PA3050 and imported to the new PA3220, i committed successfully, but when i migrate cables from old device to the new one i get random issue! like some zones are not reachable, like i have ping to internet and telnet and traceroute but i can't b...

Old certificate showing even after new certificate mapped to the ssl profile

Hello, We are using Software Version - 8.0.8, Global Protect Agent - 4.0.4 One user is able to connect the VPN through portal but when accessed the URL from the internet still seeing the old certificate after new certificated mapped. We tried to reinstall the GlobalProtect client by accessing the GlobalProtect portal so the client pulls the late...

Resolved! Recommended PAN-OS version

Hello Please need to know the recommended upgrade PAN-OS version from Paloalto for PA-3020. Appricate your help Thanks

DPWorld by • L1 Bithead
  • 7799 Views
  • 2 replies
  • 0 Likes

Preventing Split-Brained Monster, HA Failure Technique Idea?

I am trying to develop a technique to handle HA failure conditions, between two PA units, in an "Active/Passive" configuration. What I want to try is to connect an HA1 link to an intermediate switch. By default, what I notice is that if I take down the link between the primary PA box and the L2 switch, the PA backup unit will then become "Active...

pa-test.png

Global Protect connects even machine certificate not present in store

Has anyone encountered this issue ? https to portal interface IP gives an error "Valid client ceriticate required".GP users are still able to connect to GP VPN even if machine certificate not present in store. I have Global protect Portal configuration > Agent > App > Client Certificate Store Lookup as "Machine".

File Blocking applications

What is the reason that the Applications field within File Blocking Profiles only allow a subset of all applications? For instance, I have a file blocking profile that alerts on several file extensions for webmail applications I've specified, and I'm trying to add meetup-email, startmail, and zimbra, but these are not available. I thought perha...

Resolved! Mitigating CVE-2019-5786

Anyone know which Content Update (released or upcoming) might contain a mitigation for CVE-2019-5786? Description: https://www.helpnetsecurity.com/2019/03/06/chrome-cve-2019-5786/ Cheers

Resolved! Global Protect and no Source User Identified

I have a user with Windows 7 and Global Protect who couldn't get to an internal web site. When I went to look in Monitor/Logs/Traffic I could see that the Source User field was blank and therefore not hitting the anticipated allow policies. He says it's a corporate laptop. Any other common issue that would prevent the domain/user ID from being r...

Resolved! GlobalProtect Multiple Portal Support

I have GlobalProtect 4.1.3-8 and durning the install I added to portails and there is now a portal selection at the bottom but ater make a connection it is always grey and I see no wat to log out of the current connection. This is on a Windows 7 install so I'm guessing it works in Windows 10 or I'm missing a disconect option someplace. ???

Tanquen by • L1 Bithead
  • 17111 Views
  • 11 replies
  • 0 Likes

Pushing Local Admin Accounts from Panorama

Hi, Please forgive me if this is a stupid question as I am quite new to Palo Alto firewalls and Panorama. We currently have Panorama running on PanOS 8.1.6 and the same for our firewalls. We are using AD accounts for all our Administrators using radius authentication which works fine but we are discovering things that we cannot do with them and ...

  • 24412 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks