This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

HTTPS Access Issue

I cannot access our Palo Alto device through HTTPS, although I can still access it via SSH without any issues.After investigation, I found that the certificate was expired. Why did it work after restarting management plane from cli prior to changing the expired certificate then ?

T.Galal by • L0 Member
  • 862 Views
  • 1 replies
  • 0 Likes

GP issue with IOS device

We are facing issue with connectivity using GP in I Phone devices. We are getting the below error.gateway apple T the network connection is unreachable or the gateway is responsive check the network connection and reconnectWe tried installing new set of certificate with pkcs format on iPhone yet it is not working.We checked the Monitor log where...

Evaluation Licenses

I have Palo-Alto Firewalls and Panorama installed via KVM on eve-ng. I am utilising these systems for exam preparation. I require the eval licenses so I can utilise Panorama correctly. Can someone let me know how I can get the eval licenses without being a partner etc?

Clarification on App Rule - I thought I understood this

I recently moved a firewall into being managed by Panorama. I setup an Application rule specifying the application as PANORAMA which includes the ports necessary (I assumed) for Panorama communications but the firewall could not be added successfully until I allowed port 3978 traffic. The logs showed 3978 being recognized as SSL initially and...

TonyDeHart by • L4 Transporter
  • 12963 Views
  • 22 replies
  • 1 Likes

PA-VM MGT not reachable in GCP.

I have PA-VM deployed in GCP with SD-WAN. PA-VM sits behind SD-WAN for intranet traffic.attached image is how my setup looks like . Query. I can't reach firewall mgmt via internal network (access via Public IP to mgt Public works fine) . everything on private interface (Eth1/1) works fine.We have return routing in place for MGT subnet in GCP rou...

Nischal by • L2 Linker
  • 1827 Views
  • 3 replies
  • 0 Likes

Resolved! Error in commit after upgrade to 10.1.5-h1

After upgrade from a PA850 from 10.1.5 to 10.1.5-h1 in the end of last week we no longer can commit new configs 😞It gives the following error when we try to commit.Validation Error:rulebase -> security -> rules -> Block xxx -> hip-profiles unexpected hererulebase -> security -> rules is invalidWe've reverted to running config,...

Customer Portal error issue

I need to get licenses from the customer portal page under "Assets". However, I cannot as I keep getting an error on the page and only have "home" and "resources" as options in the left hand menu options. Is there a problem with the portal or is it something else?

cagwyther_0-1738167127357.png

Resolved! Application change port/protocol change request

I am Boundary Technician with the US AF, and currently TBS with a customer who are attempting to est. a tunnel with the following applications: wireguard and zerotier. The tunnels are not coming ups for some reason. Both applications are using the dynamic-udp as a standard port. Question, how to I request a port research / change for the two ...

Upgrading panorama questions

Some real easy questions. We want to upgrade our M-200, so in software platforms, I want the m type, correct? Also, can I safely ignore built in plugins? they don't need to be upgraded separately, correct? thank you

Understanding Syslog: Strata vs Panorama

Hello, I am part of an MSSP, and we ingest data from multiple clients. Some clients forward logs from Panorama, while others use Strata Logging Service. I would like to understand how we can differentiate logs based on their source—whether they were forwarded from Panorama or Strata. Is there a specific identifier or static keyword in the logs...

Sending Before Change and After Change details in Panorama to Syslog

I've been testing the logging of change events to a syslog server from Panorama. Syslog events indicate a change made by a person and the general section of the change without giving any specific details of what was changed. Looking in Panorama in the Monitor tab I can see the change event and some details that are sent to syslog, but the deta...

merrick by • L1 Bithead
  • 9672 Views
  • 5 replies
  • 0 Likes

APP-ID: Xunlei TCP 33221

Hello, has anyone encountered this application "xunlei" appearing in the traffic logs using destination port TCP 33221? This port is also used by Cortex XDR. Wondering if this is malicious or benign. Appreciate your comments. Thank you.

Frequent DPD flaps between CGW and AWS

Hi, Frequent flaps between CGW and AWS site-to-site VPN occur and DPD down logs have been seen. Does Palo Alto devices not go well with AWS? Has anyone experienced such a problem? Thank you,

nanashi by • L0 Member
  • 802 Views
  • 1 replies
  • 0 Likes

Resolved! Trouble with Asterisk

I would have submitted a TAC case, but the customer support portal is broken and you have to have a TAC case to speak to someone on the support number. Anyway, having issues with using the asterisk when creating a URL object. Our task is to block several websites, directing us to use, for example, *.badwebsite.* Please advise.

  • 24462 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks