General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Upgrade path to 8.1.6 from 8.0.14

Hello can you advise on the recommended upgrade path from PAN-OS 8.0.14 to 8.1.6 ? can i install directly the 8.1.6 version or do i have to install first 8.0.15 ? so it is 8.0.14 -> 8.0.15 -> 8.1.6 ?OR8.0.14 -> 8.1.6 ?OR8.0.14 -> 8.0.15 -> 8.1.0 -> 8.1.6 ? thanks in advance

stoikosr by L1 Bithead
  • 7355 Views
  • 6 replies
  • 0 Likes

Resolved! Single Sign on configuration

HI every one , any one help me to configure signle sign on in palo alto . as per my expirence we use to have agent in fortinet for sso. but in palo alto, i never configure SSO before and i,m not able to find any SSO Step by step, We have Active directory Envirement and Palo Alto 3220 HA . any link or video

Resolved! Commit Failed and Unable to Restart Device and Management Server

On PA 200 running 8.0 unable to commit it shows failed.Running and candidate config is syn. 1>>Did Commit Force no luck2>>During Commit ran the below command it state of init does not change show management-clientsClient PRI State Progress-------------------------------------------------------------------------routed 30 init 0ha_ag...

MP18 by Cyber Elite
  • 3802 Views
  • 4 replies
  • 0 Likes

Resolved! No Traffic Logs in CLI and Gui

No traffic logs in cli and guilast log i see is midnight 2AM MST debug log-receiver stats all logs incremented tail mp-log logrcvr.log shows 2019-02-01 02:58:42.332 -0700 Error: _write_task_disk_flush_process(pan_logdb_writer.c:1501): Error executing the disk flush routine from write_task_disk_flush_process2019-02-01 02:58:42.332 -0700 Error: _t...

MP18 by Cyber Elite
  • 4870 Views
  • 2 replies
  • 0 Likes

Please recommend

Dear all, Can you recommend to use 200 users for PA firewall? What kind of firewall we should use for 200 users? Best regrets,Cardi Moe

Resolved! Failover PPPoE Connections

We have PA-200s and 220s that we provide to our branches that have their own internal range that gets advertised into our network through global protect. They all have their own internet connection but if that goes down then we have no redundancy in place. I've been looking at the multiple ISP docs for failover and i can do that successfully wit...

Resolved! URL Filtering with Any Any

Hello all, We are preparing a firewall in which the first security rule has to be :Source and Destination: ANYFrom TRUST Zone to INTERNET Zone. Application and Service: AnyAnd then there is a URL Filtering profile attached to the rule. So will this rule match all the traffic coming from TRUST Zone to INTERNET Zone. Or when URL Filtering profile ...

Does PANOS is impacted by DNS Flag day ?

Hello community, Do you know if PANOS is impacted by DNS flag day ? I know CheckPoint and Juniper SRX are impacted by this change DNS config. But I do not see any info provided by Palo alto about that. Best RegardsAndres P.

Suggestion for Panorama update

Within Panorama, while managing client firewalls, routinely the customer wants some variation of the built-in URL category restrictions. While it is great to have so many categories and for the most part they are well apportioned. However, to get around the one off requests for sites to be opened that are in a category that is blocked, it is our...

kprewitt by L1 Bithead
  • 3087 Views
  • 3 replies
  • 0 Likes

Panorama Dynamic Updates SSL Connect Error

After upgrading some of our firewall and Panorama to PAN OS 8.x, we cannot push out dynamic updates from Panorama anymore. We are still able to push out dynamic updates to firewalls running anything below PAN OS 8.x, but nothing within the PAN OS 8.x range. We verified and are not blocking port 28443 anywhere, but are getting an error when tryi...

Dynamic Updates Palo Alto.jpg

User-ID: Require some guidance on best architecture for UserID deployment

Hi everyone.We currently have a small rollout of UserID across 2 of our firewalls across 2 sites. I think there are some gaps in performance and redundancy and I'd like people's opinions about the best way to deploy UserID. Bit of background about our environment. We have approx 40 domain controllers spread across 2 domains over 10-15 sitesUser ...

URL Filteting question

We received an alert about the behavior of the virus. The malicious loader is downloaded from the URL of compromised legitimate sites, where it is disguised as an image.The URL by which the malicious loader is hosted, all addresses end with the string abc.jpg. The string in the URLs where the encryptor is hosted is:hxxp://[anything]/abc.jpg I re...

aaobuhov by L2 Linker
  • 7042 Views
  • 7 replies
  • 0 Likes
  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
Labels