General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Best practice for Palo Alto Uplink

We are looking to deploy our new boxes (PA-3220) in HA in the next few weeks. We are trying to go with best practice methods. 

 

Currently, we have an Layer 2 ae interface that has multiple subinterfaces. Each subinterface is tagged with a Layer 3 SVI.

...

Global Protect DHCP config

With our firewall for VPN and DHCP all we configure is under GP gateway/agent/client settings we have an IPpool and address route.  We need to add DHCP option 160 and I don't believe that it can be done on the Palo.  We have never setup a  DHCP relay

...

Resolved! Register new management IP address of PA to Panorama

My PA is already connected to the Panorama.

I had to change the Management IP address. 

The PA lost connection to the Panorama.

The Panorama shows the PA with old IP and status Disconnected.

Is there a way to update the IP of the PA on the Panorama, or f

...

Resolved! Traffic going through Management port

Hello All,

 

We were setting up a PaloAlto Firewall and made all the basic configuration to make a test on the production environment, however when connecting to the production environment, we could see that all the traffic from the PaloAlto firewall w

...

Resolved! Decryption Broker License

I can't activate the Decryption Broker License in the support portal. There is only the Decryption Port Mirror License available. Is there anything to do before? Or is there an additional subscription for this?

hermey by L1 Bithead
  • 2074 Views
  • 2 replies
  • 0 Likes

Panorama & "Managed Devices" unable to connect

I believe I have set up the Panorama and Firewalls correctly as per a few different KB articles I've read. I've check connectivity between the MGT interfaces, made sure that the attempts weren't being denied due to the fact that "permitted IP's" were

...

aayoung by L1 Bithead
  • 2376 Views
  • 2 replies
  • 0 Likes

Support PC which is connected via global protect.

When user is connected via global protect. How can destop support person connect to user pc who is logged in via global protect. I tried with desktop connected to global protect and then trying to access user pc who is also connected via global prote

...

policy block website because of application deafult

Dears

 

There is policy on my firewall ,we set the service as "Application-Default" not "Any" .

 

the problem is that when user access to specefic website ,the connection be dropped because the service is "Application-Default" although the destination po

...

Resolved! Panorama - Templates

I'm trying to figure out what the best practice and recommended method is for templates inside of Panorama?  I've heard some conflicting info.  Some advice says if I'm managing say 20 firewalls in Panorama, I should have a template for each firewall.

...

ce1028 by L4 Transporter
  • 3340 Views
  • 4 replies
  • 0 Likes

SNMP Polling - IPSec Tunnel Status

I have downloaded the MIB's but cant find anything which would enable me to monitor the status of an IPSec tunnel.

 

Is it possible to monitor IPSec tunnel Up/Down via SNMP?

welly_59 by L3 Networker
  • 5021 Views
  • 5 replies
  • 0 Likes
  • 24298 Posts
  • 99 Subscriptions
Top Solution Authors
Top Liked Authors
Labels