General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 2961 Views
  • 2 replies
  • 14 Likes

Captive Portal web form displaying basic auth in chrome

When I set up the Captive Portal and configure it for browser challenge, on non domain joined machines I get the following prompt before I'm sent to the web-form.  Is there any way I can get rid of this or at least get it encrypted so users aren't at

...

Capture.PNG
Lcroce by L1 Bithead
  • 2213 Views
  • 2 replies
  • 0 Likes

MineMeld - Feeds Authentication Verification

Hello Folks,

 

My MineMeld experience has been great thus far thanks alot for creating such a robust community product.

I set up authentication feeds recently and am curious where I can verfiy authentication is successful? 

Is this a Firewall Log or

...

Resolved! Firewall cert-SSL forward proxy-To actual destination,

I know for a fact that firewall intercepts SSL connection  and generates on-the-fly cert to clients under decryption scenario. But, I wasn't able to find enough resources explaning how firewall intitates connection to the actual destination on client

...

Missing fields in custom reports that would be useful

I am trying to make a more meaningful executive style report for user activity and web browsing. Currently the 'User Activity' report has columns which are not availble when generating a custom report; estimated browse time, count, bytes, etc. 

 

If I

...

mike406 by L2 Linker
  • 2524 Views
  • 1 replies
  • 0 Likes

DUO MFA and username with a space

8.1.2 platform

LDAP user with a space in the username "john smith@ldap.com"

Auth profile with sAMAccountName working fine for "john smith" tested from cli

GlobalProtect with single factor LDAP auth working fine externally for "john smith"

Auth policy for

...

Strange dataplane MGMT plane behaviour

Hi,

 

We are having strange behaviour with DP and MGMT plane.

 

We received these alarms:

 

 show log system | match severe

2018/07/20 12:00:02 high     general        general 0  Dataplane under severe load

2018/07/21 12:00:02 high     general        general

...

BigPalo by L4 Transporter
  • 2860 Views
  • 8 replies
  • 0 Likes

Resolved! Monitoring Global Protect

I'm currently in the process of migrating my company from AnyConnect to Global Protect on our 5220s.  I'm looking for your feedback on how you all "monitor" the VPN service?

 

When comparing the "dashboard" view of Cisco's ASDM I don't really see anyth

...

MineMeld docker based on centos / rhel?

Hello!

 

I have been looking for a docker image that is based on Centos / Rhel and not Ubuntu, but I cannot find any.

Is there any image beeing worked on?

 

Also, the Docker image runs root inside, which I cannot seem to change as I get the following

...

Resolved! User-ID Redistributed users not the log file

Hi Guys,

 

For one our customer we have two virtual cluster - frontend and backend firewalls. On the frontend firewall we have Global Protect enabled, with LDAP and User-Group Mapping, assign different access for different user group. Connected users s

...

Resolved! Any way to de-auth a user outside of SSH?

I know that we can force a logout for a user from the captive portal on the CLI as shown in the link below but is there a way to access this functionality through the web management portal?

 

https://live.paloaltonetworks.com/t5/Management-Articles/How

...

Lcroce by L1 Bithead
  • 2488 Views
  • 5 replies
  • 0 Likes

Resolved! Panorama Certificate Profile Breaks Refresh

Hello Folks,

 

I have a strange scenario and am most likely missing something. 

I created a CA cert from a new Panorama template. I installed into the MineMeld server and verified the cert is showing up via google chrome. I then created a certificate

...

Resolved! How to deactivate virtual PA firewall with API

Trying to deactivate a PA-VM firewall with the API.

 

First I add the Licencing API key to the PA with the firewall API:

 

In order to hide my real values, let's use:

 

myfirewall.corp as my firewall

cxvzvxvcxvczc as my firewall's API key

dgshgdjsgdjsgj as m

...

Panorama/Palo Alto Design Query

Greetings Folks,

                           I have a Design and deployment Question. Our company have 3 Data centers located at three different Geographical Locations. We have a project to deploy Palo Alto 5200 Series Appliance in the environment as I

...

  • 24037 Posts
  • 99 Subscriptions
Top Solution Authors
Top Liked Authors