This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Question to traffic processing (PA-3020)

Hey guys,Can someone tell me how exactly the Palo Alto firewalls, especially the PA-3020, process traffic?Is that done via Software/CPU or via hardware?I mean, if it's done via Software, the palo alto firewalls are just workstations with a linux os and network cards, aren't they?Sometimes I observe that the latency in the network rises. That is ...

MPI-AE by • L4 Transporter
  • 2450 Views
  • 1 replies
  • 0 Likes

Automating Palo Alto update sequence

Hey guys, so I've got the various Palo Alto PA220 XML Apis that lets you automatically update the Firewall instead of having to do it through the GUI interface. I want to know what is the best way to create a script to do this automatically so I don't have to do this manually step by step.

Zohaib89 by • L0 Member
  • 2351 Views
  • 1 replies
  • 0 Likes

Upgrade Path

I am using PA3050 & need to upgrade PAN OS from 6.1.9 to 7.1.21can I know the OS path for upgrading & downgrading (for backout)

Question to wildfire renewal

Hey guys,we need to renewal our licenses and I'm thinking if I should renew the wildfire subscription.The problem is that we are not allowed to upload data to the public cloud (because of data privacy reasons)So we actually don't really use wildfire fully.What do you think? Is it worth to do the renewal under that circumstances?

MPI-AE by • L4 Transporter
  • 2071 Views
  • 1 replies
  • 0 Likes

Model PA-5060

Hi All, I have deleted the mp-logs by mistake, is there way to retrieve the logs?If please kindly provide your suggestions will help us greatly. I run the below command delete debug-log mp-log file *

Resolved! GUI shows interface CLI shows Int not found

Web gui shows interface eth1/23 But cli show interface ethernet1/23Server error : Interface 'ethernet1/23' not found show system state | match capacfg.general.is-admin-login-saml-capable: Falsepeer.cfg.general.is-admin-login-saml-capable: Falsesys.s1.ha1.capability: [ auto, 10Mb/s-half, 10Mb/s-full, 100Mb/s-half, 100Mb/s-full, 1Gb/s-half, 1Gb/s-...

MP18 by • Cyber Elite
  • 5224 Views
  • 4 replies
  • 0 Likes

Resolved! QoS statistics pop-up no longer shows a graph

Anyone come across a situation where the QoS Statistics pop-up dialog no longer shows a graph of traffic? With PanOS 6.x, this dialog worked great. With 7.1.x on the PA3020 it worked great. But With PanOS 7.1.21 on PA500 and PA200, I just get an empty gray area. Using Google Chrome 72 on Ubunutu Linux 18.04.

fjwcash by • L4 Transporter
  • 3874 Views
  • 3 replies
  • 0 Likes

Evnet IDs descriptions

I am looking for a KB article or document which explains event IDs related to System logs. For e.g. Logs> System > type (general)- event ID (system-start). How many type of event IDs are in PAN firewalls system logs & their descriptions ?

Schedule Restart of Firewall

Is there any web/gui interface option to schedule a reboot/restart of a PA 3000 series firewall running 8.1.5? Any command line level option? We'd like to restart the firewalls middle of the night without IT being awake to do so. Mike

mlarish by • L1 Bithead
  • 15202 Views
  • 3 replies
  • 1 Likes

sync panorama config to FW

Hello I have 2 FWs(HA pair) managed by panorama and I I followed below instruction and applied on 1 of them(the primary one) now cannot see any configs from panorama on the device.https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfkCAC And now I've "enabled Device and Network Template" and "enabled Panorama policy and o...

qd_056 by • L2 Linker
  • 3964 Views
  • 1 replies
  • 0 Likes

SSL Decryption

Hi guys,Nowadays I am playing with a PA-VM (no license) and decryption policy. Basically there are many articles and that explain how Decryption policy works and how to set it up. I have checked and double checked my setting and I cannot make facebook.com for instance work when I enable the Decryption. Here are the rules:Decryption RulesSecurit...

PaloForum-Decryption.JPG
PaloForum-Security.JPG

Resolved! User Credential Detection- False positive

What method is everyone using to handle false positives for credential phishing? Does everyone just create a custom URL category and drop in the sites where users use corporate email as their user ID?

Windows 10 Release Cycle and Global Protect Client

Hi All, I'm currently working in an environment which is trying to keep up with the latest Windows 10 release cycles with their Windows as a Service model which brings out releases every 6 months. We have found that with our AV products, our vendor has struggled to keep pace the Microsoft's development of Windows 10 and as a result we have had...

NQ1234 by • L0 Member
  • 7440 Views
  • 3 replies
  • 0 Likes

Firewall migration, testing rules

Is there a way to test the rules on a new Palo alto vs the existing firewall it will be replacing without affecting traffic? Something like TAP mode but that can block traffic like an in production firewall?

gonzox98 by • L0 Member
  • 2971 Views
  • 2 replies
  • 0 Likes
  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks