General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Packet Dropped

Hi Team,

 

Need your help.

While running global counter I can see continously packets are gettignn dropped with below error.

 

a609598@paf-ld6-mvs-01-01(active)> show counter global filter packet-filter yes delta yes severity drop

Global counters:
Elapsed t

...

IPsec packet drop , once the ecmp is enabled

Hi Team 

 

we are facing packet drop issue on ipsec traffic once the ecmp is enabled . 

we have two ISP and wish to balance the traffic and using balanced round robbin for the same , once this is enabled ipsec packet drop occurs and if we disable ecmp e

...

Rameshwar by L3 Networker
  • 4805 Views
  • 12 replies
  • 0 Likes

Active/passive HA on PA5020

I am using this link https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-High-Availability-on-PAN-OS/ta-p/54086 to try to configure active/standby HA on my 5020 and I am confused about the ports (control links (CL) ha1, CL ha

...

Capture.JPG
jac101 by L2 Linker
  • 2077 Views
  • 3 replies
  • 0 Likes

PANOS 8.1.2 RADIUS / IPv6

Hi,

Since upgrade to PANOS 8.1.2 RADIUS (for firewall administration) tries to connect to the IPv6 address of the Microsoft NPS server:

 

2018-07-10 09:33:14.305 +1200 debug: pan_make_radius_request_buf(pan_authd_radius_prot.c:384): RADIUS request type:

...

SARowe_NZ by L3 Networker
  • 1526 Views
  • 0 replies
  • 0 Likes

Resolved! How to Use DAGPusher / DAG

I cannot find any documentation on these prototypes.  How does MM know what devices to push to?  It seems to me we would need to clone stdlib.nonpersistentDagPusher or stdlib.dagPusher and enter some configuration.

 

 

I also don't understand the dif

...

Updating Panorama device templates after forced changes

I've run into a couple of situations where I've had to update the firewall configuration manually because it was disconnected from pan (The ISP forced me to change IPs).  The config in Panorama remains unchanged. How do I update this without deleting

...

Syslog parsing from Cisco WLC

Hello

we have a netwrok design where we want to filter some traffic from wifi zone to inside zone

But the problem is when we try to get syslog from Cisco Wlc or access point we see only hostname\ip address combination not username.

There is also an NPS

...

paloalto-wireless (1).jpg
Radmin_85 by L4 Transporter
  • 1453 Views
  • 0 replies
  • 0 Likes

Failed to get WF-500 UPDATES

Hello all

The problem began 3-4 days ago WF -500 stop to get updates.In the Dynamic Updates section when we click check now button the updates of Antivirus and Apps and Threats is ok but not WF-500 UPDATES

Some screenshots from the inside of WF-500

a873bde2-606f-4c02-a7d4-3f9c06d5fff2.jpg
e3d3a054-8ae9-4569-925a-e18d8a84f804.jpg
Radmin_85 by L4 Transporter
  • 2611 Views
  • 3 replies
  • 0 Likes

Detailed Documentation

Does anyone know if there are any plans on releasing detailed documentation for MineMeld? Specifically, I am looking for documentation on writting my own prototypes. I know that can can use existing ones as templates, but I would like to see document

...

Resolved! Help with understanding OSPF FIB decision

Hi All,  this weekend I had to clean up an asynchronous routing issue, by disabling route advertisement on one side.  I have a WAN, which is an upside down triangle, with A and B at the top, and C at the bottom.  C was routing right, C->B and traffic

...

  • 24308 Posts
  • 99 Subscriptions
Top Solution Authors
Top Liked Authors
Labels