General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 397 Views
  • 0 replies
  • 0 Likes

Resolved! losing panorama config pushed to firewall

 

wondering if we have pushed all the config from panorama to pa.

PA has all the global  security polices.

 

what will happen  if we lose that panorama device like hardware failure?

 

or if we delete all the config from panorama and give it reboot?

MP18 by Cyber Elite
  • 2468 Views
  • 2 replies
  • 0 Likes

Resolved! ssl decryption and policy deny

 

I have configured ssl decryption and rule is there to allow the traffic 

IT is hitting the right rule but policy says denied?

 

 

what can be reason for this?

 

Capture.PNG
MP18 by Cyber Elite
  • 6649 Views
  • 5 replies
  • 0 Likes

Resolved! session offfload and flow basic

 

When we do session offload then PCAP can not capture the session offload traffic .

if i am also doing flow basic on that then flow basic will not be impacted by session offload?

 

Regards

Mike

MP18 by Cyber Elite
  • 3789 Views
  • 4 replies
  • 0 Likes

Resolved! Wildfire appliance on a darknet

I have recently been given the responsibility of installing and managing a previously purchased WF-500.  It was purchased for an environment that is completely disconnected from the Internet, totally dark.  My question is - is there a way to manually

...

Resolved! ssl-decrypt exclude-cache ---SSL_CLIENT_CERT

 

when i run below command 

 

show system setting ssl-decrypt exclude-cache

 

VSYS SERVER APP TIMEOUT REASON DECRYPTED_APP PROFILE EXCLUSION_LIST_MATCH

13.71.172.130:443 ssl 42077 SSL_CLIENT_CERT undecided default No

 

does this mean that PA can not decrypt

...

MP18 by Cyber Elite
  • 4245 Views
  • 2 replies
  • 0 Likes

Resolved! Decryption Profile ----No decryption

i am using default  decryption profile.

 

Under tab  no decryption i see below

 

block sessions with expired certs

 

 

need to understand when does this setting is used when i am doing the ssl decryption or not doing ssl decryption?

 also does it only apply

...

MP18 by Cyber Elite
  • 3007 Views
  • 4 replies
  • 0 Likes

show counter global | match proxy

Need to verify if below output looks good from ssl decrypt 

 

show counter global | match proxy
ctd_fwd_session_proxy_deny 384306 0 info ctd pktproc Content forward: action init denied for decrypted sessions
ctd_switch_proxy 4 0 info ctd pktproc switch t

...

MP18 by Cyber Elite
  • 3530 Views
  • 3 replies
  • 0 Likes

Resolved! LDAP over IPsec?

Hello.

 

I'm trying to configure UserID via our domain controllers in AWS.

 

The setup:

We have an HA PA-820 pair on-prem connected to our domain in AWS via a redundant IPsec tunnel.  Traffic is passing between LAN and IPsec zones; on-prem workstations ca

...

Tunnel Migration

Hello,

 

I am going to migarte my production firewall PA5050 into new location, already done the setup of firewall.

 

Can any one please suggest the best possible way to migrate my all IPVPN tunnels in New Palo Alto, is basilcy to move one palo alto to a

...

Resolved! Working temperature

Hello everyone

What are the normal working temperature for palo-alto pa-820, pa-500  and pa-3020 ? 

It seems that it's beyond to the normal specifications ( above 40 °C )

Thanks's you for your answer

Learner by L1 Bithead
  • 5588 Views
  • 6 replies
  • 0 Likes

Resolved! AutoFocus-Hosted MineMeld: access to API

Hi,

 

we have an autofocus instance with MineMeld application enabled. I'd like to call this Minemeld's API in order to get some metrics for our internal reports about Intel.

 

With self-hosted Minemeld is easy, but, is it possible with  AutoFocus-Ho

...

  • 23842 Posts
  • 112 Subscriptions
Labels