General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 2167 Views
  • 0 replies
  • 0 Likes

Resolved! Application incomplete

Hi,

Why Palo Alto is detecting sometimes the application like SSL and sometimes like incomplete??????

if the connection has 134bytes is not detected, but with more than 134b is detected..........

SOC_CSG by L4 Transporter
  • 32554 Views
  • 9 replies
  • 0 Likes

Resolved! Always on Global Protect and Open Wifi

I'm in the initial stages of a support case, but am curious if you all have had issues or success with this scenario:

 

A GP user that is:

 

pre-login / always-on / machine cert auth / no split-tunnel (0.0.0.0/0 include route) with access to their local

...

How configure Taxii miner for API Authentication

Dear All,

 

I need create Taxii miner with API Key Authentication

 

 

I don’t know about how enable API Key authentication.

 

I need configure API on my mimer as " VitusTotal".

 

Which should miner I use? How configure it?

 

 

Thank you

1-1.jpg
2.jpg
3.jpg

Signatures Minimum OS Version??

critical

18754

DemonBot Command and Control Traffic

reset-both

8.1.0

 

I noticed the above threat in releas 8096.. Which says minimum PAN-OS 8.1.0...

 

We are on 8.0.x , does that mean the above would not be applicable?

 

Thanks

 

Rob

 

Resolved! Tunnels status VPN between Palo Alto-3260 and AWS VPC.


Folks,

Typically when we build a IPSec tunnel from the AWS VPC to the on-prem Palo Alto box we get an option of 2 tunnel's from the AWS. I have options of configuring both the tunnels as UP/UP when the end point is something like a Juniper ISG-1000/IS

...

nson2139 by L3 Networker
  • 4237 Views
  • 2 replies
  • 0 Likes

Traffic Logs - Resolve Hostname - Micrsoft Public IPs

Dear Commuity,

I am very new to Palo Alto Firewalls. I saw, that you can check the "Resolve hostname" checkbox when viewing Traffic Logs. Sadly a lot of IPs are not being resolved. I examed a few random samples and notices, the IPs mostly belong to Mi

...

tpmeier by L0 Member
  • 4192 Views
  • 3 replies
  • 0 Likes

Resolved! Firewall - Interface High availablity

Hi All,

In my scenario, i have single PA-220 for guest access.  In trusted zone i would like to keep the interface lelvel (active/standby) high availablity.Interface type as L2.  I couldn't do aggregate interface since it's connected to two seperate s

...

pa-220-ha.png
gpsriram by L1 Bithead
  • 2452 Views
  • 2 replies
  • 0 Likes

FQDN TTL shorter than refresh time

I have a problem with some sites that uses DNS round robin as loadballancer.

As an examble:

vs-ssh.visualstudio.com

 

This has the TTL set to 300 sec, the PA's FQDN refresh is default 30 min.

So the firewall won't cache all IP's used in the round robin, b

...

  • 24249 Posts
  • 119 Subscriptions
Top Liked Authors
Labels