General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Minemeld on CentOS

I have seen a few older threads referencing minemeld on CentOS using ansible or docker etc, Does anyone have it running on CentOS natively without the use of other 3rd party tools? or an up to date walkthrough? The Ubuntu 14.04 setup is quick, simple

...

hshawn by L4 Transporter
  • 5750 Views
  • 5 replies
  • 0 Likes

Resolved! Stop routing if PBF monotoring is down PA-500

 

 First post to this forum!

 

I have a PA-500 and 3 ISPs. 2 of the 3 VLANs are forwarded using PBF (VLANs 10 & 30 ) and the third uses the default route (VLAN 20).

 

My (simplified) configuration is as follows;

 

 VLAN10 - PBF to ISP 1 fail-over to default

...

James_D by L0 Member
  • 2569 Views
  • 2 replies
  • 0 Likes

Resolved! how interpret MAC in pcap

Hello,

I have a doubt about how to interpret macs in rx pcap and tx pcap. I thought that:
when the traffic enter a layer 3 interface:

the mac destination addres in rx file must be the mac of  ingress interface?
and in tx the source mac, must be the mac o

...

Marivi by L2 Linker
  • 3209 Views
  • 2 replies
  • 0 Likes

Management CPU Utilization is 100%

Our PA-500 management utlization reaches 100% sometimes...according to PA support, There's a process called 'gdindex.sh' runs every 15 minutes for log indexing.

We need to reduce the management plane traffic for better performance. Any suggestions?

Resolved! Change ISP

we're upgrading the internet link in one of our offices...so qwe purchased a new link from a different provider...and I was thinking of unplugging the old link, plugin the new link, remove the old public IP address and then add the IP address of the

...

Can I block IP immediately using EBL?

Hello

 

I am using the Palo Alto Next Generation Firewall PA-3020 / PAN OS 7.02.

 

I use EBL to block IP.

 

After testing, it will take a long time for IP registered in the text file to be applied to the firewall.

 

Of course, i set "repeat" to 5 minutes in

...

ragonfly by L0 Member
  • 1520 Views
  • 1 replies
  • 0 Likes

Resolved! youtube application

Hello I have a doubt about applications:

If I search in my palo alto object>applications    search: youtube I obtain next output

I can add to a policy rule youtube but when I open I found that

 

don't have dependency, and implicitly application uses.

I s

...

youtube.JPG
youtube 2.JPG
Marivi by L2 Linker
  • 3644 Views
  • 3 replies
  • 1 Likes

Resolved! Split-Brain Enable HA Config Change

We are setup as active/passive and have intentionally caused a split-brain with our firewalls (5050's) by removing one from vwire mode and removing all cables except mgmt port to perform some migration activities.  We left the "Enable HA" checked on

...

Resolved! 3200 and 5200 Series New Interface Types

Can you please help us with the new 3200 and 5200 interface types, because it is not very clear in the hardware documentation?

 

  • The firewalls now have HA1 and HA1-Backup dedicated ports. The 5200 also have AUX-1 and AUX-2. Can we still use any other d
...

BatD by L4 Transporter
  • 2159 Views
  • 1 replies
  • 0 Likes

Resolved! Problem of PA-220 behind another router

Got a PA-220 to test.

Want to setup something like below:

Internet <-> Juniper SSG-140 (GW:192.168.1.1) <-> PA-220 <-> user's device (172.16.1.0/24)

 

1. The SSG-140 can reach internet

2. The PA-220 external port (192.168.1.100) can reach internet too

3. T

...

jeremylo by L3 Networker
  • 1964 Views
  • 2 replies
  • 0 Likes

Resolved! [Minemeld 0.9.48] - Some prototypes not available in the GUI

Hello team!

 

I hope you are doing alright !

 

It looks like that since the last update (0.9.48), I am no longer able to setup new nodes with the prototypes:

 

stdlib.localDB

OR

stdlib.aggregatorIPv4Inbound

 

Moreover,  a couple of my miners/nodes no

...

camsad by L1 Bithead
  • 6065 Views
  • 11 replies
  • 0 Likes
  • 23591 Posts
  • 103 Subscriptions
Top Solution Authors
Top Liked Authors
Labels