This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Certificate can not be deleted

Hi, Im having a weird issue in Palo Alto. First of all, we dont have vsys configured but in the confgi we can see the field <vsys> and many config in it.Basically whn we run a commit we receive a warning about "certificate duplicate". We go to devices-> certificates and we can only see one certificate with that CN. But if we check the ....

BigPalo by • L4 Transporter
  • 10996 Views
  • 3 replies
  • 1 Likes

Resolved! Renew SSL Certificate

Hello, Can someone please provide link/instructions for renewing expiring Panorama SSL certificate with a .pfx certificate? Also, please provide the instructions for the Palo Alto devices as well if they also require SSL certificates. Thanks in advance.

Upgrade PanOS on PA-220-OSS

For an upgrade of our small branch offices we have ordered 11 PA-220's and 11 PA-220 On-Site Spares. Before we send them around the globe, the planning was to upgrade all the devices to the latest software version (8.0.4).The PA-220's didn't have any problems after we registred them in the portal. Before with our PA-200-OSS devices it was possib...

mtijhoff by • L1 Bithead
  • 4351 Views
  • 4 replies
  • 0 Likes

Resolved! HA Pair Dashboard Resource Information Widget Session Count

I have a pair of PA-4020's in HA active/passive. I just did a commit (which went fine, except the synchronization failed and I had to push the config to the passive peer). I then looked at the passive and the information in the Resource Information widget on the Dashboard is a little suspicious. Again, this is immediately after a successful c...

bhelman by • L2 Linker
  • 7091 Views
  • 6 replies
  • 0 Likes

Ipsec proxy Tunnel issue with multiple tunnels

HI Team, I have configure Ipsec between PA and Cisco ASA, IPSEC is up but not traffic is passing. During the troubleshooting I have found for the proxy ID's configure in palo alto for some of the proxy id's only encapulation packet paloalto is sending and there is no decapusulation packet increasing for the proxy tunnel. But in the same Ipsec t...

Aruba Wireless Authentication User-IP Mapping Question

Hi, I have an Aruba Instant Cluster with an SSID set up to user a radius server to authenticate users. The cluster controller is configured to send syslog data to a Paloalto User Agent running on a Windows server. I've had this set up for a time but am now moving in to a updated OS (Windows 2016) and updated UA (8.0.10-7). My question revolves a...

Dan by • L1 Bithead
  • 13814 Views
  • 9 replies
  • 0 Likes

Resolved! custom groups using ldap-filter/query to use with GlobalProtect

Hello. I'm currently working on a setup involving Global protect for teleworking. the company has users who are allowed to connect remotely with their id, and users who aren't. the decision for this is based on a user-attribute: msNPAllowDialin (of type boolean)-->if set to allow --> useer should be able to logon to GP portal/gatewayif se...

System disk space issue on PA 5050

PA 5050s on PAN OS 7.1.7 in HA pair active/passive mode always have high systme disk space issue. this is output from active one- ========show system disk-spaceFilesystem Size Used Avail Use% Mounted on/dev/md2 3.8G 3.4G 269M 93% //dev/md5 7.6G 2.9G 4.4G 40% /opt/pancfg/dev/md6 3.8G 1.9G 1.7G 54% /opt/panrepotmpfs 2.0G 116M 1.9G 6% /dev/shmc...

Processes

Good morning!. I have a question about processes. Somebody know what is process "fpp_dp"? because I see that this process is consuming too much CPU What about this process?fpp_dp1,fpp_dp2, etc... Regards

Resolved! PA 3020 boot error

when i reboot this PA 3020 i see below on console Starting pan_hardserver: [ OK ]Starting pan_lunasa: mv: cannot create regular file `/opt/pancfg/hsm/export/': Is a directory 019-01-18 11:41:10.109 -0800 Error: sysd_construct_sync_importer(sysd_sync.c:328): sysd_sync_register() failed: (111) Unknown error code2019-01-18 11:41:11.113 -0800 Error:...

MP18 by • Cyber Elite
  • 14886 Views
  • 6 replies
  • 0 Likes

PAN HA Pair Shows Antivirus Mismatch But Are Correct On Device Page

Totally new to PAN...So I upgraded a pair of PA500s in HA to 7.1.17, and since then (I believe) the dashboard on each shows Antivirus Mismatch. When I fly over the "Antivirus Mismatch on either's dashboard, both show the active PAN as having the older version). However, on the DEVICE> Dynamic Updates tab both devices show 2861-3371 downloade...

PAN-OS Manual Upgrade

Hi All, I were tried to upgrade the PA-850 from PAN-OS 8.0.7 to PAN-OS 8.1.0. I have uploaded the image but it didn't list the image. Any input on this ??

gpsriram by • L1 Bithead
  • 2565 Views
  • 2 replies
  • 0 Likes

Resolved! override traffic packet capture

Hi, all I have questions about Application Override traffic packet capture. Q1. when i enable App override, Overridden traffic is offloaded without reaching Dataplane. is it correct? Q2. Overridden Initial packet such as UDP when session setup is offloaded? Q3. I think any traffic that is offloaded can't do packet capture without disable hardwar...

hbshin by • L2 Linker
  • 3472 Views
  • 1 replies
  • 0 Likes
  • 24412 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks