General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Aggregated interfaces on PA 5250

Hi there, We are implementing aggregated interfaces on PA 5250. I have configured 10 aggregated subinterfaces from two physical interfaces. when I enabled the LACP on the aggregated interface group, the maximum interfaces is set to 8 by default. I believe this is number of physical interfaces that are active at any given time right? if that is i...

Resolved! User-id and 8.1.x and MS AD best practise

Hi What I have 8502x 5220's active / passive clusterpanorama3 MS AD's + 2 Exchange boxes I have the panorama userid sync with 850 and a VIP address on the 5220's so it always connected to the active node. I believ that panorama pulls userid info from each node and sends it to each node - I believe I believe I tested that before. My PA's 850 &a...

PA200 not booting properly

Hi there, I recently picked up a couple of PA-200s for my lab. I was able to factory reset one of them and it seems to be working just fine. The other does not get any farther than this in the boot sequence (looks like it tries to boot twice){Welcome to the PanOS Bootloader. U-Boot 7.1.14.0-0 (Build time: Sep 18 2017 - 16:37:18) Skipping PCIe po...

Resolved! Allow application from a blocked category

Hello everyone,I searched this topic before posting and couldn't find an exact answer so I'm asking the question here. I have blocked a specific category that includes multiple appplications. I now need to allow one of those applications, but keep the category blocked as it is. Do I just create a new policy just about the blocked category policy...

GCSS-RT by L2 Linker
  • 6064 Views
  • 6 replies
  • 0 Likes

Resolved! Uprade GP Client to 4.1

Hey guys,PA-3020 with 8.0.7 and GP Client 4.0.5I want to upgrade GP Client.Are there 4.1.X versions I should avoid or can I use the latest 4.1.10?Clients are Windows 7-10 and macos 10.12-10.14

MPI-AE by L4 Transporter
  • 5038 Views
  • 3 replies
  • 0 Likes

Resolved! PA VM 7.1.0 after set default gateway, can't ping any Internet IP including the gateway.

Hi All, I setup PN VM 7.1.0, my vmworkstation is pro 12.5.2. I bVMnet11 bridge my wire network card.I set 192.168.200.98 for the management interface of the PA VMNext I set IP, zone and default gateway for ethernet 1/1 Afther that, I am having problems. The default gateway can ping the IP of ethernet 1/1 of the PA VM ping 10.12.172.230Type escap...

1.jpg
2.jpg
3.jpg
Fred321 by L0 Member
  • 9547 Views
  • 3 replies
  • 0 Likes

Import XML configuration into MS-SQL

I couldn't determine the correct place to discuss this topic, so please forgive me if I have improperly located it. I need to know if there is a way to import the XML config file into a MS-SQL database. One of the challengs of auditing a firewall is not only to know which rules have been used or not, but also to know what objects within a rule...

runas command and user-id monitoring

How are you guys managing the "runas" command alongside user-id. In our test environment, I'm finding with the user-id windows agent, you get the last login event from the domain controller, with the new "runas" user. Once that times out- no more internet access to the original user, unless you generate an authentication event to the domain co...

Sec101 by L4 Transporter
  • 5332 Views
  • 4 replies
  • 0 Likes

Resolved! Configuring HA2 interface on a non-HSCI port?

With a pair of 5220s, how does one set up HA2 on a port that is not HSCI, for an Active-Passive HA environment? When I go to configure HA2, either with the GUI or CLI, the only interface I can choose is the HSCI port. But I do not have the quad transceivers, nor do I yet require the use of the HSCI bandwidth capabilities. Here is what the CLI...

Port Translation very slow

Hello, We setup a inbound NAT to direct port 443 to a server on-site on 10.x.x.x and it all worked fine and fast - then it turned out we needed to adjust it to port 4443 as the customer was using port 443 for inbound client VPN connections of course. Anyway, after I adjusted the NAT inbound for this one rule (a simple change of 443 to 4443) - th...

URL blocked - Application "incomplete" and Flag 0x400019 in traffig log

Hello, everybody! I have a problem with a URL that is being blocked despite being explicitly allowed in the white list. I have seen the traffic logs and for that destination IP address (i.e. a website on the internet) I see that Application is "incomplete" and the Flag 0x400019. What does this flag mean? I only know the usual flags as listed in ...

Resolved! A few questions

Afternoon Firstly I want to say I really like this product, it has endless possibilities in improving internal security in our environment. I have a few questions I hope you can help me clarify so I understand how to use the product better. I am using a syslog miner to send syslog TRAFFIC and THREAT data to Mine Meld from my Paloalto firewal...

  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
Labels