General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4106 Views
  • 0 replies
  • 0 Likes

Upgrade from from 7.1.2 to 7.1.22

I have a question about the upgrade.If I want to upgrade PAN OS from 7.1.2 to higher version. <such as 7.1.22 or higher>Do i need to in-place upgrade step by step from 7.1.2 to 7.1.21 then 7.1.22. orI can upgrade directly from 7.1.2 to 7.1.22?

Resolved! OS-X and GP - Machine Start

Need some feedback. On Windows 10 this doesn't seem to be a problem but for OS-X (version 10.14.3 Mojave) GP doesn't connect on a reboot. It's saying the portal isn't available. I think GP is starting up before the the NIC and that's what's causing this. Does anyone have any pointers on where to look? We're running GP version 4.1.6.

20190129_090336.jpg

Resolved! Dataplane higher than usual. why??

Hi, We realised that the PA5050 (panos 7.1.12) dataplane has increased to 55% when it is always is at 28%. I would like to know why this increase is caused. I dont know how to translate this commands in order to have an idea about why is high the dataplane. show running resource-monitorDP dp0:Resource monitoring sampling data (per second):CPU lo...

IP address is Exempt from SSL decryption But traffic log shows decrypted

There is this Microsoft Application autopilot with tons of urls and destination IP addresses. I have created the SSL decryption Rule on Top for no decryption for all those IP addresses. When i see traffic logs it shows decrypted when i see url logs it shows no decryption for those IP's.Is this by design? I never saw like this before?

MP18 by Cyber Elite
  • 2223 Views
  • 2 replies
  • 0 Likes

Resolved! SSH to HA1 port - Password

Trying to ssh the active device from passive using HA1 IP address mparmar2@Lab-EOCDC-NGFW-1(passive)> ssh port 28 host 1.1.1.11mparmar2@1.1.1.11's password:Permission denied, please try again.mparmar2@1.1.1.11's password:Permission denied, please try again.mparmar2@1.1.1.11's password: tried the login pw do not work.need to know what is pw f...

MP18 by Cyber Elite
  • 4745 Views
  • 5 replies
  • 0 Likes

Resolved! Failover issues with Active/Passive

Hello, Using 3020 HA pair. We are currently having two issues regarding fail-over:Fail-over time from primary to secondary takes about two minutes. Fail-over back to the primary takes on average 10 minutes. This seems excessive for a production environment.Once failed-over from primary to secondary, our externally-facing websites become inaccess...

URL Filtering

Hi All, We were configuring different URL filtering profiles on PA 5250 firewalls for each environment. Since the requiremnet is one environment should access specific set of URL's and other should acccess another specific set of URL's. for example the PCI envirmnet should not access the URL's defined for the HIPPA environment. So, we are endin...

How can I validate that my TAXII output miner is working?

Hi! Been testing the product for a couple of weeks, and I really am impressed, but while the TAXII/STIX miners work well from HailATAXII, I'm trying to feed output from my aggregator into a TAXII output to push to other tools down the line that can ingest the indicators and match them up from what comes out of our internal malware analysis. (S...

Basic setup- PAN8.0 + Minemeld issues

Hello All, Having a problem getting a basic setup running feel I am missing something simple. - Fresh install of MM on AWS. Built using Ubuntu and the following link: https://live.paloaltonetworks.com/t5/MineMeld-Articles/Manually-install-MineMeld-on-Ubuntu-Server-14-04/ta-p/98454 -Everything worked fine -Installed the O365 lists as this i...

Symbolic link - No such file or directory MineMeld 0.9.11-2build1 on Ubuntu 14.04.05LTS

Hi, I'm installing Minemeld behind a proxy server using the Ubuntu 14.04.05LTS image. The strange thing is that last week I've used exactly the same approach for demo purposes and Minemeld worked like a charm and got a 'Go' for it for production. This week, following the same approach the Minemeld instalation fails. I confirm that the VM has i...

Office 365 URL feeds include Dropbox and itunes?

Just started going through the new miners and looking over docs, we are not in production on our deployment for O365 yet. I understand there are app-Id's that would catch most of these, but I noticed that the URL Minemeld feed for the "any-any" version includes quite a few URLS....specifically including: www.dropbox.com www.youtube.com *.itun...

Sec101 by L4 Transporter
  • 10081 Views
  • 7 replies
  • 0 Likes
  • 24332 Posts
  • 124 Subscriptions
Top Solution Authors
Labels