Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 160 Views
  • 0 replies
  • 0 Likes

Resolved! User ID Agent

Where the userid agent save log file ?

 

We want to start audit when User ID update task failed on PA

Is there a possibility to move the logs of userid to the siem / syslog server 

Resolved! LACP NEGOTIATION LOG FILE

Hello,

 

In order to debug an issue in our LACP interfaces.

I need to run lacp debug and to find the log file of lacp negotiation.

 

And there is a log file of all ethernet negoatiation?

 

Thanks in advance.

Resolved! ISP redundancy and route load balancing.

Hi, Community!

 

I'm looking for some help with a customer today 

 

Here's the situation:  a customer has a dual ISP configuration and wants the traffic both to be balanced between the routes of the two providers and that a redundancy scheme is put in p

...

CMachado by L2 Linker
  • 7872 Views
  • 8 replies
  • 0 Likes

Resolved! Replace passive member in HA (A/P)

Hi,

 

We need to replace the passive member in a cluster. So in the HA preempt is not enabled. And priority in the active member is 100. So i understand that we can directly connect all the cables for new devices and this new member will take passive r

...

BigPalo by L4 Transporter
  • 2144 Views
  • 1 replies
  • 0 Likes

Stuck in Failsafe Bootloader. what now?

My PA-820 is stuck in failsafe bootloader mode.  what are my options now? I am no longer getting the option for MAINT mode either.  If I let the system boot on it's own I get the below and it just keeps rebooting.

 

 

 

 

Welcome to the PanOS Failsafe Boo

...

GPL-DDay by L0 Member
  • 6843 Views
  • 4 replies
  • 0 Likes

Resolved! No source user in logs post 8.1.2 upgrade

At the weekend I upgraded all our boxes from 8.0.9 to 8.1.2 as we need to make use of the new GP - Split Tunnel by URL features & Enhanced UserId coolness. Yes, I know - this was brave 

 

Everything seems to be working as expected & as it was pre-upgr

...

SimmSimm by L2 Linker
  • 3304 Views
  • 2 replies
  • 0 Likes

Asymmetric routing with the same interface

I have to deploy the WAN firewall which have 2 WAN link. The requirement was egress traffic from the firewall to WAN will be send to Link A but the response traffic will be ingress from the Link B. 

If I've set both of these interface in the same zone

...

Site to site VPN help :(

Unable to make VPN work. Both "IKE Info" and "Tunnel Info" are red light in IPSec Tunnel.

The peer is a Juniper vSRX.

Normal configuration with trust, untrust and VPN zone in both firewall. Each zone has its own subnet.

Both firewall can ping each other

...

jeremylo by L3 Networker
  • 6418 Views
  • 5 replies
  • 0 Likes

VM-Series firewall on VirtualBox

Hi,

I know that VM-Series firewall requires VMware ESXi running vSphere 4.1 or 5.0.

But I don't have VMware right now on my laptop and only I have is Oracle VirtualBox 4.2.6 - just for tests and presentations (not for commercial purpose)

On VirtualBox I

...

Clientless VPN

Hi All,

 

can someone provide configuration example for Clientless VPN access through GP portal...
I was already used configuration steps explained on this page, but seem that it not helped in my case. I'm able to authenticate and open portal landing pa

...

Tician by L3 Networker
  • 5284 Views
  • 5 replies
  • 1 Likes

Delete inherited zones

Hello,

 

I'm creating locally a lot of new zones on a 3020 firewall, but committing it says the hardware limit is 40.

Currently I inherit 9 zones from a Global Template from Panorama, but I don't need that zones.

I cannot modify the Global Template. Ther

...

  • 23595 Posts
  • 107 Subscriptions
Top Liked Authors
Labels