General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! How to generate traffic reports for a specifi interface

Hello Palo experts, I want to create a report which tells me what bandwidth has been used on an outside interface, for say the past month. Something that can display the average bandwidth being used during a day would be good. I see on my PA-3050 that under Network>QoS, that live bandwidth stats can be displayed, but can't see where I can exp...

rchung54 by L2 Linker
  • 24037 Views
  • 4 replies
  • 0 Likes

Deleting Panorama templates

Hi, A firewall has been configured with a template from Panorama, the template was then deleted from Panorama.Can i safely remove the template from the firewall without deleting the config applied through the template?

Add device in Panorama

Hi, We are trying to add a devices in Panorama. We have checked the conectivity FW-> in port 3978. We can see the packet running tcpdump in Panorama about packets comming from FW. so connectivity is OK. Everything looks ok. And we have another FWs in PAnorama correctly. This is the status "DIsconnected": FW versions is 7.1.6Panorama 7.1.9

Panora.JPG
BigPalo by L4 Transporter
  • 2198 Views
  • 2 replies
  • 0 Likes

Resolved! What is the value of a Backup Peer HA1 IP Address?

In some of our firewalls I note a secondary IP address is assigned to a single HA group ID. What is the value of having this second IP? The problem it's introducing is that SNMP Trapsare getting gerated once or twice a day noting that the secondary IP address couldn't be reached. But there is never a problem with HA failing over - the primary is...

Can Pan-os take action base on rules, condition or report?

Hi.I have a question about a scenario. Can Pan-OS/Firewall detected a infected host/client pc and take the following action.Blocking internett access from the infected hosts/client pc and move the infected host to a another security zone?ORJust move the infected host to a "security" zone that don't have access to internet?

tonyle by L0 Member
  • 2299 Views
  • 2 replies
  • 0 Likes

SSL Certificate Profiles - PANOS External Dynamic Lists

I'm running into an issue with external dynamic list threat feeds while using panos 8, the problem being is it seems they introduced a great feature to validate and authentication SSL sources by validating the signing CA for the threat feeds that can induce access rule entries. This is great although the problem I'm facing is the implementation ...

RTECIT by L0 Member
  • 4016 Views
  • 4 replies
  • 1 Likes

DNS "Aged Out"

ISP changed fiber line coming into site. DNS server addresses did not change (they say) but the external addresses and gateway did change. I can connect to the internet but just for about 2 to 3 minutes and then I lose access to the internet. Updated all definitions with the new information. Simple network… LAN ...

Panorama - Object

Hello I start the Panorama configuration and I created Device Group. My device group are based on our site location : FR - Paris - Toulouse I would like to know the best way for the configuration. If I create objects in Paris DG (object to define Paris's local networks and servers) and I create also objects in Toulouse DG (object to define Tou...

Resolved! New template stacks after upgrade?

Hi all, I upgraded from an 8.0 release to 8.1.3 to prepare for a migration to some new hardware. I did a commit after the upgrade to make sure everything was synced up between Panorama and the firewalls and I believe everything went ok. I was making some adjustments at the recommendation of the Best Practices analyzer in Expedition and noticed ...

jsalmans by L4 Transporter
  • 7230 Views
  • 5 replies
  • 0 Likes

GlobalProtect successfully connected but no traffic allowed

Hello, From more than 1.5k users, there are two users with the following problems: They can connect to globalprotect portal, they receive ipadd / sm / def gateway / dns servers . There is no overlap between ip information received from firewall and local networks settingsIn windows, the default route received by palo alto fw has the lowest metri...

Resolved! 15 cpu cores in 5220

Hi everyone, Need to know the cores from 0 to 15 as shown below does it mean that 5220 has 16 dedicated CPU including number zero?And all these cores are used by the DP only? show running resource-monitorResource monitoring sampling data (per second):CPU load sampling by group:flow_lookup : 17%flow_fastpath : 16%flow_slowpath : 17%flow_forward...

MP18 by Cyber Elite
  • 4406 Views
  • 3 replies
  • 0 Likes

Poor Man's HA

Hi, We have 2 PA VM100 devices. For some reasons we are not able to configure more network interfaces at the moment.Can I create an active-passive HA cluster just using the Management interfaces in the way that the second device receives all configuration updates from the first device and is ready to be "activated" manually in case of failure of...

  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
Labels