General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4222 Views
  • 0 replies
  • 0 Likes

Resolved! BPA tool

I was told that we can use a tool called Best Practice Assessment. Have you got the link/app to access it?

Farzana by L4 Transporter
  • 17527 Views
  • 8 replies
  • 1 Likes

Resolved! Global-protect configs

I changed global-protect configs by GUI then I checked the following 2 items was changed which I had never changed.Would it happen If I changed it by CLI? and is it by design? The 2 itemsGlobalProtectPortal configuration > Agent > Configs > App・Set Up Tunnel Over Proxy (Windows & Mac Only):Yes・Display Status Panel at Startup (Window...

question on ms-one drive option

Hi,I am looking into blocking online storage from our network, all except One drive. Under objects->Applications->Category-> general-internetsub category file-sharingI see ms-one drive has several optionsbase, downloading, share and uploading.what does the base option?can we selectively allow/block each event?

routing forwarding

hey guys If there is a site-to-site VPN between the FWs and I want to force some specific internet access traffic to go through this VPN, is it possible? Can I just add static routing on FW to force the specified traffic to the VPN tunnel?Do we need some config for the traffic which coming back? Thanks

qd_056 by L2 Linker
  • 4388 Views
  • 3 replies
  • 0 Likes

Monitor->App Scope->Summary how to interpret "Top 5 Gainers (last 60 minutes vs yesterday)"

In Monitor->App Scope->Summary how should the report entitled Top 5 Gainers (last 60 minutes vs yesterday) be interpreted. Is iteg.1) last 60 minutes compared with same 60 minutes from yesterday2) last 60 minutes cpared with hourly average from yesterday3) ..... I am not able to find much info on this anywhere. Appreciate any feedback. Reg...

Test Cases

Hello we are planning to migrate from PAN OS 7.1 to 8.1. Is there a document or a list of tests that we can do to check if the migration was successful ? I mean we can obviously test if some critical servers are reachable but still any template would help here. Thanks and Regards,RJ

Resolved! CLI access to PA

@reaper, @BPry @Mick_Ball What could cause a superuser to not be able to ssh to the CLI of the PA?

jdprovine by L4 Transporter
  • 12324 Views
  • 31 replies
  • 0 Likes

Website issue.

Hi to everyone!We have one site - halqa.az, which I can't give access to.I have permitted everything on policies, permitted everything on decryption, still no success.What should be else permitted? Maybe some of you will be able to help me.Maybe there is any timeout issue or anything else.

Integration with Cisco ISE Pxgrid

Good afternoon! Does anybody know the integration with Cisco ISE Pxgrid? Does Palo Alto can act as pxGrid Client with Cisco ISE to apply TrustSec for SGT Bindings?Does Palo Alto support Cisco SXP protocol and act as Listener to ISE Pxgrid speaker? Thanks.

QOS setup to to guarantee vital services with free internet

Hi, I would like to configure QoS for our Internet data lines on our PA-220s as follows: - Internet line could be up to 100Mbps.- I would like to guarantee at least 1 Mbps to SAP- I would like to guarantee at least 2 Mbps to Office365- Give the rest to Internet Browsing. SAP and Offrice365 policies are already setup and match traffic.I have two ...

Resolved! Active Passive Panorama and commit failed

We have M100 in active passive mode. Everything is in syn between both M100 I logged on Passive M100 today and found that few firewalls show as commit failed. Then from active M100 I pushed config to those firewalls for testing purposes and all was good.Those firewalls show in syn with both active and passive M100 but on passive M100 it still sh...

MP18 by Cyber Elite
  • 2759 Views
  • 1 replies
  • 0 Likes

GlobalProtect client stopped working after upgrade from 8.0.7 to 8.1.2

Errors: globalprotectgateway-config-fail, description contains 'GlobalProtect gateway client configuration failed. User name: , Client OS version: Microsoft Windows 10 Enterprise , 64-bit, error: Matching client config not found. Once I removed the group from Gateway\Agent\Client Settings\User group, and selected any, users could login, no error...

Resolved! Issue with URL Category

We have just setup SSL decryption and added custom response pages on our firewall. We have a custom filter for shopping sites and the category is set to alert, if a user is a member of an AD group associated with this filter it works fine. We decided in our fall back filter to set the category to continue which would display a message and allo...

  • 24355 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels